CSA Security & Access Management 2

Question 1

A Salesforce admin needs to ensure that users in the 'Support' role can see records owned by users in the 'Sales' role, but not vice versa. Which feature best accomplishes this?

Accepted Answer

Role Hierarchy

Answer

Role Hierarchy grants record access upward, so a higher role can see records owned by lower roles below them in the hierarchy.

Question 2

Which login security setting requires users to confirm their identity via a one-time code sent to their phone or email when logging in from an unrecognized device?

Accepted Answer

Identity Verification (MFA)

Answer

Multi-Factor Authentication (Identity Verification) challenges users with an additional verification step when logging in from an unrecognized browser or device.

Question 3

A user should be able to read all Opportunity records but only edit Opportunities they own. Which OWD and role hierarchy combination achieves this?

Accepted Answer

OWD = Public Read Only, no role hierarchy needed

Answer

Public Read Only OWD lets all users read every record while owners retain full edit rights by default.

Question 4

Which type of Salesforce sharing rule is based on criteria such as record field values rather than record ownership?

Accepted Answer

Criteria-based sharing rules

Answer

Criteria-based sharing rules share records when field values meet specified conditions, regardless of who owns the record.

Question 5

An admin wants to prevent users from logging in to Salesforce outside of business hours (8 AM–6 PM, Monday–Friday). Which setting enforces this?

Accepted Answer

Login Hours

Answer

Login Hours settings on a profile restrict the time windows during which users assigned that profile can log in.

(CSA) Certified Salesforce Administrator Practice Test

(CSA) Certified Salesforce Administrator Practice Test

CSA Security & Access Management 2