All practice questions

An organization has configured strict security settings for users assigned to the Field Specialist profile. The administrator set the Profile Login IP Ranges to $192.168.10.1$ – $192.168.10.254$ and Profile Login Hours to Monday through Friday from 08:00 AM to 06:00 PM EST. Additionally, the Organization-Wide Network Access Trusted IP Ranges include $10.0.0.1$ – $10.0.0.254$. A user assigned to the Field Specialist profile attempts to log in under two different scenarios:

1. On Wednesday at 09:00 PM EST from IP address $192.168.10.45$.
2. On Thursday at 02:00 PM EST from IP address $10.0.0.50$.

Which two login outcomes will occur based on these configurations?

An administrator at Cloud Kicks is designing an enterprise access control architecture using Permission Sets and Permission Set Groups. Match each specific administrative requirement on the left with the correct Salesforce configuration mechanism on the right.

An administrator at a healthcare company needs to revise several custom fields on the custom object Medical_Device__c to support a new regulatory compliance audit. The administrator plans to convert field types and reconfigure object settings. Which two technical impacts and data integrity risks must the administrator account for before changing custom field data types? (Select 2)

Northern Trail Outfitters uses a custom object named `Supplier_Audit__c` to store sensitive internal vendor reviews. Business requirements mandate that access must be restricted so that only the record owner has access to their assigned audits. Additionally, executive managers positioned higher in the role hierarchy must NOT automatically inherit access to these sensitive record reviews.

Which TWO configuration actions must a Salesforce administrator execute in Organization-Wide Defaults (OWD) to satisfy these security requirements? (Select TWO.)

A security audit requires an organization to implement strict login controls for users assigned to the Field Auditor role. The administrator must ensure that:
1. Users attempting to log in from outside the corporate VPN subnet are completely blocked from authenticating.
2. Users currently logged in have their active session forcibly terminated as soon as their defined shift ends.

Which two configuration actions must the System Administrator perform to meet these requirements? (Select 2 answers)

An administrator at Financial Consultants Inc. is building a custom application to manage client portfolios. The administrator needs to display the calculated total sum of asset values from a child custom object on the parent custom object Portfolio__c. The two objects are currently connected by a Lookup relationship. When creating a new custom field on Portfolio__c, the administrator notices that the Roll-Up Summary field type option is disabled. Why is the administrator unable to select the Roll-Up Summary field type?

A company's financial team requests that the Salesforce administrator change the organization's fiscal year start month from January to July while keeping a standard 12-month calendar structure. Which statement accurately describes the impact of updating the start month in Standard Fiscal Year settings?

A regional manager at a logistics firm requires the 'Export Reports' permission to perform a one-time quarterly audit. This access is not granted by their current profile, and other employees assigned to the same profile should not receive this permission. Which administrative action should be taken to grant this user the required permission?

Highland Healthcare Systems is planning to restructure its financial tracking to align with a custom 4-4-5 accounting cycle. The Chief Financial Officer requests that the Salesforce Administrator enable Custom Fiscal Years in the organization. Before implementing this change in Setup, which critical operational constraint must the administrator communicate to executive leadership regarding Custom Fiscal Years?

An administrator at a security firm is configuring record-level access for a custom object named Vendor_Audit__c and evaluating default access behaviors across standard and custom objects. The compliance team requires that records be kept confidential by default, while allowing management access control flexibility. Which of the following statements correctly describe Organization-Wide Default (OWD) capabilities and security principles for this scenario? (Select TWO choices.)

Cloud Components Inc. is reconfiguring its financial structure in Salesforce to align with a complex 13-week quarterly accounting calendar. Before enabling this feature under Company Information and Fiscal Year settings, the Lead Administrator must brief leadership on the long-term system implications. Which major technical constraint must the administrator communicate regarding the activation of Custom Fiscal Years?

A Salesforce administrator at Helios Financial needs to configure a 4-4-5 financial calendar to align Salesforce reporting with the organization's accounting cycle. Which critical operational implication must the administrator evaluate before enabling Custom Fiscal Years?

A System Administrator assigned a remote inventory specialist to the custom profile 'Logistics Operations'. The administrator configured Profile-level Login IP Ranges on this profile to strictly permit access from the corporate VPN range of 198.51.100.1 to 198.51.100.50. Later, the administrator added a home broadband IP range of 203.0.113.10 to 203.0.113.20 under the organization-level Network Access settings. What happens when the inventory specialist attempts to log in from home using the IP address 203.0.113.15?

An organization uses a custom Billing application where access is managed using a Permission Set Group named 'Billing Operations Group'. This group includes three permission sets: Invoicing Access, Payment Processing, and Credit Adjustments. A compliance audit requires that a subgroup of internal auditors assigned to this group must retain all viewing and editing capabilities provided by the group, but must be explicitly restricted from deleting Credit Adjustment records. All other billing users must continue to have delete access. How should the system administrator meet this requirement while maintaining a scalable access architecture?

An administrator at Zenith Financial is establishing access controls for a newly created custom object, Strategic_Account_Plan__c, which contains sensitive client growth strategies. Executive leadership mandates the following security criteria:

1. Default access must restrict all users from viewing or editing records created by others across different branches of the organization.
2. Managers and executives positioned above the record owner in the role hierarchy must automatically inherit full access to view and update their subordinates' account plan records.
3. Non-owner peers within the same department or role level must be denied visibility to these records by default.

Which Organization-Wide Default (OWD) configuration and sharing setting for Strategic_Account_Plan__c fulfills these requirements while maintaining standard record access inheritance?

An administrator at a renewable energy company creates custom fields on the Lead object to capture site assessment data, such as 'Roof Angle' and 'Solar Panel Capacity'. The business requirement specifies that this information must automatically transfer to the corresponding Account and Contact records created during lead conversion. Which administrative action is required to ensure this data persists when converting leads?

Solaris Energy Solutions tracks sensitive client site evaluations using a custom object named Site_Inspection__c. Management mandates that field technicians must only be able to view and edit Site_Inspection__c records that they explicitly own. Additionally, regional operations managers must automatically receive access to all Site_Inspection__c records created by their direct and indirect subordinates within the managerial role structure. Which configuration should the administrator implement to enforce these access controls using Salesforce security best practices?

A Salesforce Administrator is configuring security controls for a user profile. Which two statements accurately describe how Salesforce enforces Profile-level Login IP Ranges and Login Hours? (Choose two.)

A company wants to secure a custom object named Staff_Evaluation__c. The administrator must ensure that users can only access records they own, while managers above them in the role hierarchy are automatically granted access. Which TWO configuration steps should the administrator take to fulfill this requirement?

An administrator at a logistics company needs to set up a custom picklist field on the Lead object to capture delivery preferences. The administrator must ensure that specific picklist values are shown only for specific Lead record types, and that this preference data is preserved when a Lead is converted into an Account, Contact, and Opportunity. Which two actions should the administrator take to fulfill these requirements?