Security & Access Management Flashcards

Which Salesforce feature allows an admin to group multiple Permission Sets together and assign them all to a user at once?

Answer: Permission Set Groups

Permission Set Groups let admins bundle multiple permission sets and assign the group as a single unit to users.

When Salesforce OWD for Accounts is set to 'Private,' which users can still see all Account records?

Answer: Users higher in the role hierarchy than the record owner

With Private OWD, the role hierarchy grants access upward, so managers and executives above the owner in the hierarchy can view those records.

What does the 'Modify All Data' system permission allow a user to do?

Answer: Read, edit, delete, transfer, and mass delete all records regardless of sharing

'Modify All Data' is a powerful system permission that bypasses all sharing rules and record-level security, granting full CRUD access to all records.

An admin sets up a Salesforce community. Which permission is required on a user's profile to allow them to log in to the Experience Cloud site?

Answer: Access Experience Cloud Sites

The 'Access Experience Cloud Sites' permission (formerly 'Access Sites') must be enabled on a user's profile to allow login to Experience Cloud portals.

Which of the following is a feature of Salesforce Shield's Platform Encryption?

Answer: Encrypts data at the field level while keeping it searchable via deterministic encryption

Shield Platform Encryption can encrypt field data at rest; deterministic encryption allows exact-match searching on encrypted fields.

A user reports they cannot see the 'Salary' field on the Employee record page, even though it is on the page layout. What is the most likely cause?

Answer: Field-Level Security for the user's profile restricts visibility of that field

Field-Level Security overrides page layout visibility; if FLS hides a field from a profile, it won't appear even if it's on the layout.

What is the purpose of a 'Muting Permission Set' in Salesforce?

Answer: Removes specific permissions from a Permission Set Group without editing individual permission sets

A Muting Permission Set is assigned within a Permission Set Group to suppress specific permissions that other sets in the group would otherwise grant.