Security & Access Management Flashcards

Which Salesforce feature logs every configuration change made in Setup, including who made the change and when?

Answer: Setup Audit Trail

The Setup Audit Trail records up to 6 months of setup changes, showing the user, date, time, and nature of every configuration modification.

A Salesforce admin wants certain users to access Salesforce only via SAML-based single sign-on from the company's identity provider. Which setting enforces SSO-only login?

Answer: Set 'Is Single Sign-On Enabled' on the profile and disable username/password login via My Domain policy

Enabling 'Is Single Sign-On Enabled' on a profile combined with a My Domain policy to block direct Salesforce logins forces users to authenticate exclusively via SSO.

What is the difference between 'View All' and 'Modify All' object permissions?

Answer: 'View All' ignores sharing rules to grant read access; 'Modify All' ignores sharing rules to grant full CRUD access

'View All' grants read-only access to all records of an object bypassing sharing rules, while 'Modify All' grants full CRUD access to all records bypassing sharing rules.

An admin notices several failed login attempts in the Login History. Which field in Login History identifies the reason a login attempt failed?

Answer: Status

The 'Status' field in Login History shows whether the login succeeded and, if not, provides the reason for failure (e.g., wrong password, locked out).

Which Salesforce feature allows you to restrict which connected apps and OAuth flows a user can authorize?

Answer: Connected App Policies and OAuth scopes on profiles

Connected App Policies combined with profile-level permissions control which connected apps users can authorize and what OAuth scopes they can grant.

A record owner wants to share a specific Opportunity record with a colleague who is not in their role hierarchy and no sharing rule covers this scenario. What should the record owner do?

Answer: Use the 'Sharing' button on the record to grant manual sharing

Manual Sharing (the 'Sharing' button on a record) lets the record owner or admin grant access to specific users, groups, or roles for that single record.

Which of the following best describes the purpose of Salesforce's 'Health Check' tool?

Answer: Scores your org's security settings against Salesforce baseline standards and highlights risks

Health Check evaluates your org's security configuration against Salesforce-recommended baselines and gives a score with a list of settings to improve.