About the Exam

This certification is for architects, analysts, and administrators who design secure, scalable security models on the Salesforce Lightning Platform. The exam assesses the ability to design sharing and visibility models, apply Salesforce security features, and evaluate design trade-offs for complex requirements. Passing demonstrates that you can communicate technical security solutions to stakeholders and build maintainable access models.

Exam Topics

  • Declarative Sharing67%
  • Performance8%
  • Programmatic Sharing25%

How to Use This Practice Exam

  1. Browse — Read each question, select your answer, and reveal the explanation.
  2. Exam Mode — Simulate real exam conditions with a timed session and score report.
  3. Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Last updated April 3, 2025 at 2:45 PM

Topic filter
Retired questions
Question sort

QuestionQ1

Declarative Sharing

Universal Containers plans to pilot a new application with a small group of Sales Reps.

What is the best way to give only those Sales Reps access to the new functionality while concealing the legacy functionality?

  • A Create a permission set to grant access to the new functionality and hide the old functionality.
  • B Clone the Sales Rep profile, adjust settings, and assign the pilot users the new profile.
  • C Create new user records for the pilot user that they will use for the pilot.
  • D Revoke access to legacy functions in the Sales Rep profile and create a permission set for the new functionality.
Explanation

A cloned Sales Rep profile can be customized to enable the pilot functionality and remove access to the legacy functionality, while leaving the original Sales Rep profile unchanged for non-pilot users. Permission sets extend access; they do not revoke access inherited from a profile.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Programmatic Sharing

After testing and deploying a new trigger that creates a related order when an opportunity is closed, the Architect starts receiving complaints that permission-error messages appear when an opportunity is closed.

How did this error occur?

  • A The trigger handlers class does not use any sharing keywords and the user does not have access to the orders related to the opportunity.
  • B The trigger handler class is using “with sharing” and the user does not have access to the orders related to the opportunity.
  • C The trigger should be using RunAs() when creating the order.
  • D Trigger is using IsCreateable() Apex method and the user does not have create permission on the Order object.
Explanation

A handler class declared with sharing enforces the running user’s record-sharing access. If that user lacks access to the Order records involved in the operation, the Order-related work can fail with a permission error. with sharing controls record-level sharing behavior. Secure Apex Classes

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Declarative Sharing

Sales executives at Universal Containers (UC) want to create list views that filter for large, at-risk Opportunities. These list views must be available only to certain executives who specialize in closing problematic deals.

How can UC meet this requirement?

  • A Share the List Views with the appropriate Public Group.
  • B Share the List Views with the appropriate individual users.
  • C Share the List Views with the appropriate Role in the Role Hierarchy.
  • D Share the List Views with the appropriate Queue.
Explanation

Salesforce list views can be shared with specific public groups. Creating a public group containing the designated deal-closing executives limits access to those members while allowing the group membership to be managed separately from the role hierarchy.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Declarative Sharing

Universal Containers (UC) provides training and courses to students and companies. UC is implementing a Salesforce Customer Community for its students and assigning them a Customer Community license. As part of the community requirements, UC needs to give students access to cases related to their account in the UC community.

What is the optimal sharing technique to meet these requirements?

  • A Create a sharing set to share cases with the students.
  • B Create a sharing rule to share cases with the students.
  • C Create a share group to share cases with the students.
  • D Use Apex sharing to share cases with the students.
Explanation

A sharing set grants Customer Community users access to Case records associated with the same account or contact as the user. Its access mapping can relate the user's Account to the Case Account, making it the appropriate declarative solution for account-related cases.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

Programmatic Sharing

An architect at Universal Containers wants to ensure that no security vulnerabilities exist in the Salesforce organization.

Which two tests should the architect verify?

Choose two
  • A Test Cross-Site Scripting on custom pages.
  • B Test Cross-Site Scripting on Apex queries.
  • C Test for SOQL Injection.
  • D Test for invalid user access attempts.
Explanation

Custom pages should be tested for cross-site scripting (XSS), which occurs when untrusted data is rendered as executable browser content. Code that builds dynamic SOQL from untrusted input should be tested for SOQL injection, because injected query syntax can expose unintended data. Salesforce recommends static SOQL and bind variables to mitigate this risk.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!
Know a question that should be here? Contribute to this exam
Back home