CRM CRM Security and Compliance 1

Question 1

Which access control model in CRM systems grants permissions based on a user's job function within the organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Role-Based Access Control (RBAC) assigns permissions based on organizational roles, ensuring users can only access data relevant to their job function.

Question 2

Under GDPR, how long can a CRM store personally identifiable information (PII) about EU citizens?

Accepted Answer

Only for the duration necessary for the specified purpose

Answer

GDPR's data minimization and storage limitation principles require that PII is kept only as long as necessary for the original purpose of collection.

Question 3

What CRM feature allows administrators to prevent users from exporting or printing sensitive customer records?

Accepted Answer

Data Loss Prevention (DLP) policies

Answer

Data Loss Prevention (DLP) policies restrict actions such as exporting, printing, or sharing sensitive records outside approved channels.

Question 4

Which encryption standard is most commonly recommended for protecting data at rest in enterprise CRM databases?

Accepted Answer

AES-256

Answer

AES-256 (Advanced Encryption Standard with 256-bit keys) is the industry standard for encrypting data at rest due to its strength and widespread regulatory acceptance.

Question 5

In Salesforce CRM, which feature restricts which IP addresses can access an organization's instance?

Accepted Answer

Network Access (Trusted IP Ranges)

Answer

Salesforce's Network Access (Trusted IP Ranges) setting allows admins to whitelist specific IP ranges, blocking login attempts from unauthorized networks.

CRM - Software Practice Test

CRM - Software Practice Test

CRM CRM Security and Compliance 1