CSA Security & Access Management

Question 1

What does a profile control in Salesforce?

Accepted Answer

Object and field permissions

Answer

A profile in Salesforce is a collection of settings and permissions that determine what a user can do within the application. It controls object-level permissions (e.g., create, read, edit, delete for specific objects) and field-level permissions (e.g., visibility and editability of individual fields). Profiles are fundamental for defining a user's baseline access and capabilities.

Question 2

What is the purpose of permission sets?

Accepted Answer

Extend user permissions

Answer

Permission sets in Salesforce are used to grant additional permissions and access settings to users, beyond what is provided by their profile. They are a flexible way to extend specific privileges to a subset of users without changing their entire profile. This allows for more granular control and adheres to the principle of least privilege, giving users only the access they need.

Question 3

Which feature restricts access to specific records?

Accepted Answer

Sharing rules

Answer

Sharing rules in Salesforce are used to extend record access to users beyond what is granted by organization-wide defaults and the role hierarchy. They allow administrators to grant access to specific records based on criteria (e.g., record owner, field values) or group membership. This ensures that users can see the necessary data for their work, even if they are not high in the role hierarchy.

Question 4

How do organization-wide defaults (OWD) work?

Accepted Answer

Set baseline record access

Answer

Organization-Wide Defaults (OWD) in Salesforce establish the baseline level of access that users have to records they do not own. They define the most restrictive access settings for each object, such as Public Read Only, Public Read/Write, or Private. OWDs are the foundation upon which other sharing mechanisms, like role hierarchies and sharing rules, build to grant broader access.

Question 5

What is a login IP restriction used for?

Accepted Answer

Restrict login by IP

Answer

Login IP restrictions in Salesforce are a security measure designed to control where users can log in from. By defining a range of approved IP addresses, administrators can ensure that users can only access the Salesforce org from trusted networks or locations. This significantly reduces the risk of unauthorized access from external or unknown sources, enhancing data security.

(CSA) Certified Salesforce Administrator Practice Test

(CSA) Certified Salesforce Administrator Practice Test

CSA Security & Access Management