CRM CRM Security and Compliance 3

Question 1

Which CRM security feature automatically logs a user out after a defined period of inactivity?

Accepted Answer

Session Timeout

Answer

Session Timeout automatically ends an idle user session after a set period, reducing the risk of unauthorized access to an unattended workstation.

Question 2

A CRM administrator wants to ensure that users in the sales team cannot see each other's private accounts. Which sharing model setting achieves this?

Accepted Answer

Private (with role hierarchy)

Answer

Setting the sharing model to Private means users can only see records they own, while role hierarchy allows managers above them to see their records.

Question 3

What is a 'sandbox environment' used for in CRM security and compliance testing?

Accepted Answer

A production copy used for testing changes without affecting live customer data

Answer

A sandbox is an isolated replica of the production CRM environment used to safely test configurations, integrations, or compliance workflows before deploying them live.

Question 4

Which SOC report type provides the most relevant security assurance for a CRM vendor serving multiple customers with different needs?

Accepted Answer

SOC 2 Type II

Answer

SOC 2 Type II evaluates a CRM vendor's controls related to security, availability, and confidentiality over a period of time, making it the most relevant for SaaS CRM vendors.

Question 5

When a customer submits a 'right to erasure' (right to be forgotten) request under GDPR, what must the CRM process include?

Accepted Answer

Deleting all personal data from active systems, backups, and connected integrations within the required timeframe

Answer

GDPR's right to erasure requires organizations to delete all personal data from their systems, including backups and integrated platforms, within 30 days of a valid request.

CRM - Software Practice Test

CRM - Software Practice Test

CRM CRM Security and Compliance 3