CRM CRM Security and Compliance

Question 1

Which access control model in CRM systems grants permissions based on a user's job function within the organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 2

Under GDPR, how long can a CRM store personally identifiable information (PII) about EU citizens?

Accepted Answer

Only for the duration necessary for the specified purpose

Answer

Indefinitely, if the data is encrypted

Answer

A maximum of 7 years for all data

Answer

Until the customer requests deletion, with no time limit otherwise

Question 3

What CRM feature allows administrators to prevent users from exporting or printing sensitive customer records?

Accepted Answer

Data Loss Prevention (DLP) policies

Answer

Data Masking

Answer

Field-Level Security

Answer

IP Whitelisting

Question 4

Which encryption standard is most commonly recommended for protecting data at rest in enterprise CRM databases?

Accepted Answer

AES-256

Answer

MD5

Answer

SHA-1

Answer

DES

Question 5

In Salesforce CRM, which feature restricts which IP addresses can access an organization's instance?

Accepted Answer

Network Access (Trusted IP Ranges)

Answer

Profile Login Hours

Answer

Two-Factor Authentication

Answer

Session Timeout Settings

Question 6

What is a 'consent record' in the context of CRM compliance?

Accepted Answer

Documentation proving a contact agreed to receive communications or have their data processed

Answer

A log of all CRM login events

Answer

A record of all data exports from the CRM

Answer

An audit trail of field-level changes to customer records

Question 7

Which of the following best describes 'field-level security' in a CRM system?

Accepted Answer

Controlling which users or profiles can view or edit specific fields on a record

Answer

Encrypting all fields in the database using AES

Answer

Masking all sensitive fields from the UI by default

Answer

Requiring MFA to access certain field types