Security & Authentication Flashcards
7 cards from real HAC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security & Authentication flashcards as text
What is the purpose of HubSpot's 'field-level permissions' in the CRM?
Answer: To control which users or teams can view or edit specific contact/company properties
Field-level permissions allow admins to restrict visibility or editing of sensitive CRM properties to specific users or teams.
Which HubSpot feature logs every change made to contact records, including who made the change and when?
Answer: Property history
HubSpot's property history tracks every value change on a contact property, showing the old value, new value, user, and timestamp.
When configuring SAML SSO in HubSpot, what URL must be provided to the identity provider as the 'Assertion Consumer Service (ACS) URL'?
Answer: A HubSpot-generated endpoint URL specific to the portal's SSO configuration
HubSpot generates a unique ACS URL during SSO setup that must be registered in the IdP so SAML assertions are sent to the correct endpoint.
What permission level is required to manage HubSpot's account security settings, including SSO and 2FA enforcement?
Answer: Super admin
Only super admins can access and modify account-level security settings like SSO configuration and 2FA enforcement policies.
A HubSpot admin notices that a former employee's account was used to export a large contacts list two days after their departure. What feature, if enabled, would have best prevented this?
Answer: Timely user deactivation combined with session invalidation
Promptly deactivating the user account immediately invalidates their session, preventing post-departure access and data exports.
In HubSpot's permission system, what is a 'team' primarily used for?
Answer: Organizing users to segment CRM data and manage record access
Teams in HubSpot group users together to control CRM record visibility, assign records, and manage data segmentation across the portal.
What does enabling 'Require email verification' on HubSpot forms help prevent?
Answer: Fake or mistyped email addresses from entering the CRM
Email verification sends a confirmation link to the submitted address, ensuring only reachable, valid emails get recorded in the CRM.
How this page was made: written with AI tools. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy