CRM CRM Security and Compliance 1 — Questions and Answers
Question 1: Which access control model in CRM systems grants permissions based on a user's job function within the organization?
- Discretionary Access Control (DAC)
- Role-Based Access Control (RBAC) (Correct answer)
- Mandatory Access Control (MAC)
- Attribute-Based Access Control (ABAC)
Correct answer: Role-Based Access Control (RBAC)
Role-Based Access Control (RBAC) assigns permissions based on organizational roles, ensuring users can only access data relevant to their job function.
Question 2: Under GDPR, how long can a CRM store personally identifiable information (PII) about EU citizens?
- Indefinitely, if the data is encrypted
- Only for the duration necessary for the specified purpose (Correct answer)
- A maximum of 7 years for all data
- Until the customer requests deletion, with no time limit otherwise
Correct answer: Only for the duration necessary for the specified purpose
GDPR's data minimization and storage limitation principles require that PII is kept only as long as necessary for the original purpose of collection.
Question 3: What CRM feature allows administrators to prevent users from exporting or printing sensitive customer records?
- Data Masking
- Field-Level Security
- Data Loss Prevention (DLP) policies (Correct answer)
- IP Whitelisting
Correct answer: Data Loss Prevention (DLP) policies
Data Loss Prevention (DLP) policies restrict actions such as exporting, printing, or sharing sensitive records outside approved channels.
Question 4: Which encryption standard is most commonly recommended for protecting data at rest in enterprise CRM databases?
- MD5
- SHA-1
- AES-256 (Correct answer)
- DES
Correct answer: AES-256
AES-256 (Advanced Encryption Standard with 256-bit keys) is the industry standard for encrypting data at rest due to its strength and widespread regulatory acceptance.
Question 5: In Salesforce CRM, which feature restricts which IP addresses can access an organization's instance?
- Profile Login Hours
- Network Access (Trusted IP Ranges) (Correct answer)
- Two-Factor Authentication
- Session Timeout Settings
Correct answer: Network Access (Trusted IP Ranges)
Salesforce's Network Access (Trusted IP Ranges) setting allows admins to whitelist specific IP ranges, blocking login attempts from unauthorized networks.
Question 6: What is a 'consent record' in the context of CRM compliance?
- A log of all CRM login events
- Documentation proving a contact agreed to receive communications or have their data processed (Correct answer)
- A record of all data exports from the CRM
- An audit trail of field-level changes to customer records
Correct answer: Documentation proving a contact agreed to receive communications or have their data processed
A consent record documents that a contact explicitly agreed to data processing or marketing communications, which is required by regulations like GDPR and CCPA.
Question 7: Which of the following best describes 'field-level security' in a CRM system?
- Encrypting all fields in the database using AES
- Controlling which users or profiles can view or edit specific fields on a record (Correct answer)
- Masking all sensitive fields from the UI by default
- Requiring MFA to access certain field types
Correct answer: Controlling which users or profiles can view or edit specific fields on a record
Field-level security restricts visibility and editability of individual fields based on the user's profile or role, enabling granular data access control.
CRM CRM Security and Compliance 1
Which access control model in CRM systems grants permissions based on a user's job function within the organization?