CRM CRM Security and Compliance 3

Question 1

Which CRM security feature automatically logs a user out after a defined period of inactivity?

Accepted Answer

Session Timeout

Answer

IP Whitelisting

Answer

Single Sign-On

Answer

Data Masking

Question 2

A CRM administrator wants to ensure that users in the sales team cannot see each other's private accounts. Which sharing model setting achieves this?

Accepted Answer

Private (with role hierarchy)

Answer

Public Read/Write

Answer

Public Read Only

Answer

Controlled by Parent

Question 3

What is a 'sandbox environment' used for in CRM security and compliance testing?

Accepted Answer

A production copy used for testing changes without affecting live customer data

Answer

Storing archived customer data securely

Answer

A read-only view of the CRM for external auditors

Answer

A backup system activated during disaster recovery

Question 4

Which SOC report type provides the most relevant security assurance for a CRM vendor serving multiple customers with different needs?

Accepted Answer

SOC 2 Type II

Answer

SOC 1 Type I

Answer

SOC 3

Answer

SOC 1 Type II

Question 5

When a customer submits a 'right to erasure' (right to be forgotten) request under GDPR, what must the CRM process include?

Accepted Answer

Deleting all personal data from active systems, backups, and connected integrations within the required timeframe

Answer

Archiving the data to a cold storage system

Answer

Anonymizing the data and retaining it for analytics

Answer

Transferring the data to a third-party escrow service

Question 6

Which CRM integration protocol is most commonly used to implement Single Sign-On (SSO) with enterprise identity providers like Azure AD?

Accepted Answer

SAML 2.0

Answer

REST API

Answer

SOAP

Answer

JDBC

Question 7

What is the primary goal of a CRM penetration test?

Accepted Answer

To identify security vulnerabilities by simulating attacks before malicious actors exploit them

Answer

To measure the CRM's query response time under load

Answer

To verify that all user roles have the correct permissions assigned

Answer

To test data backup and recovery procedures