Topic 1: Exam Pool A
Universal Containers (UC) has implemented Customer Community with customer community plus license for its distributors. Retail distributors have part-time agents who work for multiple distributors. Those agents should have access to other distributor accounts as well. What can be configured to grant agents access to different distributor accounts?
A. Use Apex sharing to share distributor accounts with agents using the Account__ Share table.
B. Use share group to share distributor accounts with agents who have account contact relationship.
C. Create sharing rules to share distributor accounts with agents.
D. Create sharing set to share distributor accounts with agents using account contact relationship.
Explanation: Apex sharing is a way to programmatically grant access to records for users or groups of users. Apex sharing can be used to share records with Customer Community Plus users, who are not supported by other declarative sharing options such as sharing sets or sharing rules. Apex sharing uses the Account__Share table to store the sharing information for the Account object. Therefore, the answer A is correct and the other options are incorrect.
Universal Containers (UC) uses a custom lightning component with an Apex class to display shipment information (custom object, private OWD). UC sales managers are complaining about two important points: Shipment records that belong to their teams can be seen by other users. Shipment amount should be visible only by managers, but sales reps are able to view it. Which two features did the development team miss that is causing the problems? (Choose 2 answers.)
A. Use run as in test class to enforce user permissions and field-level permissions.
B. Use with Sharing keyword in Apex classes to enforce sharing rules evaluation.
C. Use is Sharable keyword in Apex classes to assure record visibility
D. Use isAccessible() method in Apex classes to check field accessibility
Explanation: The development team missed using the with Sharing keyword in Apex classes to enforce sharing rules evaluation, and the isAccessible() method in Apex classes to check field accessibility. The with Sharing keyword ensures that the Apex code respects the sharing rules defined for the current user, while the isAccessible() method checks if the user has read access to a specific field1. The run as method in test class is used to test whether a user can perform certain actions, not to enforce permissions2. The isSharable keyword in Apex classes does not exist.
Universal Containers (UC) uses a custom Visualforce page to display shipment tracking information (custom object, private OWD) to field manager and agents. The IT team wants to make sure that users have access to only the information that is allowed. Which Apex method must be used to make sure only allowed fields are shown to the users?
A. IsReadable()
B. isShowable()
C. isAccessible()
D. isViewable()
Explanation: The Apex method that must be used to make sure only allowed fields are shown to the users is isAccessible(). This method returns true if the user has read access to the field, and false otherwise2. isReadable(), isShowable(), and isViewable() are not valid Apex methods for checking field-level security.
Ursa Major Solar is writing test methods. Which functionality does the system method "runAs()” Verify?
A. Enforcement of a user's public group assignments
B. Enforcement of a user's field-level security
C. Enforcement of user's permissions
D. Enforcement of a user's record sharing
Explanation: The runAs() method can be used to verify the enforcement of a user’s record sharing, which determines what records they can view and edit. Option A is incorrect, since public group assignments are not enforced by runAs(). Option B and C are incorrect, since field-level security and permissions are not affected by runAs().
Universal Containers has a large network of partners, who each have seasonal workers that need .. How might the Architect design the solution to federate user setup to the Partners? Choose 2 answers
A. Assign delegated external administrators at each partner
B. Grant the Modify Users permission to the partner managers
C. Allow external users to self-register
D. Create a permission set giving Read/Write to the User object to partner manager.
Explanation: The architect can design the solution to federate user setup to the partners by assigning delegated external administrators at each partner and allowing external users to self-register. A delegated external administrator is a user who can create and manage users in their own partner account. This way, the partners can have more control over their seasonal workers and reduce the administrative burden on UC. Allowing external users to self-register is another way of simplifying user creation and management for partners, as they can enable their workers to create their own accounts and log in to the community. Granting the Modify Users permission to the partner managers is not a good practice, as it would give them too much power over all users in the org. Creating a permission set giving Read/Write to the User object to partner manager is also not advisable, as it would expose sensitive user data and allow unauthorized changes.
Page 15 out of 48 Pages |
Previous |