Examkin

Soru

Zorluk: OrtaProfiles and Object/Field-Level Security

Meridian Retail Solutions requires that only three Compliance Officers out of fifty standard users have access to view and edit the sensitive Social_Security_Number__c field on the Customer__c custom object. All other standard users must be prevented from seeing or modifying this field across all interfaces and API calls. What is the recommended configuration solution a System Administrator should implement?

  1. Restrict Field-Level Security for the field on all base profiles, and assign a Permission Set with Read and Edit field permissions to the three Compliance Officers.Cevap
  2. B
    Clone the standard user profile to create a custom Compliance Profile with field access enabled, and reassign the three Compliance Officers to the new profile.
  3. C
    Remove the field from the standard Customer page layout and use Dynamic Forms component visibility rules to show the field only to Compliance Officers.
  4. D
    Set Organization-Wide Defaults for the Customer object to Private, and configure specific Login IP Ranges on the standard user profile.

Cevap

Restrict Field-Level Security for the field on all base profiles, and assign a Permission Set with Read and Edit field permissions to the three Compliance Officers.
Field-Level Security (FLS) is the primary security feature in Salesforce to control field visibility and editing across all tools (UI, API, reports, and list views). Setting baseline FLS to hidden/restricted across standard profiles and granting explicit field access via a Permission Set ensures strict data protection while maintaining an efficient administrative structure.

Adım Adım Çözüm

1
Evaluate the security layer required for restricting a specific field
Identify that Field-Level Security (FLS) is the authoritative mechanism to control field visibility and editability across UI and API.
Record sharing (OWD) controls record access, whereas FLS controls field access within records.
2
Determine the baseline FLS setting
Remove Read and Edit access on the Social_Security_Number__c field for base profiles, including the Standard User profile.
Ensures the baseline security access restricts sensitive data for all users by default.
3
Apply additive access for the specific user group
Create a Permission Set granting Read and Edit access to Social_Security_Number__c, and assign it to the three Compliance Officers.
Permission Sets provide flexible, additive permission management without creating redundant custom profiles.

Anahtar Kavram

Field-Level Security and Permission Sets
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Profiles and Object/Field-Level Security

Bu konudan daha fazla soru