Security & Authentication Flashcards
7 cards from real HAC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security & Authentication flashcards as text
Which HubSpot setting allows admins to prevent users from downloading contact records as a CSV file?
Answer: Data export permission toggle in user permissions
The 'Export' permission in user or team settings can be disabled to prevent users from bulk-downloading CRM data to CSV.
What is the recommended action when a HubSpot private app token is accidentally exposed in a public repository?
Answer: Rotate the token immediately within the private app settings
Private apps support token rotation — generating a new token instantly invalidates the old one without needing to recreate the entire app.
In HubSpot, which type of OAuth scope would a private app need to read and write contact records?
Answer: crm.objects.contacts.read and crm.objects.contacts.write
HubSpot's private app scopes follow the pattern crm.objects.[object].read and crm.objects.[object].write for granular CRM access control.
A HubSpot admin wants to ensure that users only see contacts owned by themselves or their team. Which setting achieves this?
Answer: Configure team-based CRM record access in user permissions
Team-based CRM record access permissions can be configured so users only see records they own or that belong to their team.
What HubSpot feature allows an admin to see a consolidated log of significant account-level actions such as user invitations, permission changes, and SSO configuration edits?
Answer: Account audit log
The account audit log (available on higher-tier plans) records admin-level actions like permission changes, user management events, and security setting modifications.
When should a HubSpot admin revoke a connected app's access token rather than just removing the app from the marketplace?
Answer: When there is suspected unauthorized use of the integration's credentials
Revoking access tokens immediately blocks an integration from authenticating, which is critical when compromise or unauthorized access is suspected.
Which HubSpot plan tier is required to enable SAML-based Single Sign-On for portal authentication?
Answer: Enterprise
SAML SSO is an Enterprise-tier feature in HubSpot, available for portals on Enterprise plans across Marketing, Sales, Service, or CMS Hubs.
How this page was made: written with AI tools. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy