CSA Security & Access Management 4

Question 1

Which report type in Salesforce allows an admin to audit which users have which profiles and permission sets assigned?

Accepted Answer

User and Permission Set Assignment report

Answer

The User and Permission Set Assignment report (from User reports) shows which profiles and permission sets are linked to each user.

Question 2

What is the maximum number of IP addresses that can be added to a profile's Login IP Ranges list?

Accepted Answer

20

Answer

Each profile allows up to 10 IP range entries (each range can span many IPs), but Salesforce limits you to 10 ranges per profile.

Question 3

When should an admin use Manual Sharing instead of a Sharing Rule?

Accepted Answer

When the sharing requirement is for a specific record and doesn't follow a predictable pattern

Answer

Manual Sharing is used for one-off, record-specific sharing that can't be automated through ownership or criteria-based rules.

Question 4

Which Salesforce security layer controls whether a user can see a tab for a given object in the app navigation?

Accepted Answer

Tab Settings on Profile

Answer

Tab Settings on a profile (Default On, Default Off, Tab Hidden) control whether the object's tab is visible to users with that profile.

Question 5

An organization wants all leads created by marketing to be shared automatically with the entire Sales team. The OWD for Leads is Private. What is the best approach?

Accepted Answer

Create an owner-based sharing rule sharing Leads owned by Marketing role with Sales role

Answer

An owner-based sharing rule can automatically share records owned by the Marketing role with the Sales role, keeping OWD Private elsewhere.

(CSA) Certified Salesforce Administrator Practice Test

(CSA) Certified Salesforce Administrator Practice Test

CSA Security & Access Management 4