HAC Security & Authentication 4

Question 1

Which HubSpot setting allows admins to prevent users from downloading contact records as a CSV file?

Accepted Answer

Data export permission toggle in user permissions

Answer

The 'Export' permission in user or team settings can be disabled to prevent users from bulk-downloading CRM data to CSV.

Question 2

What is the recommended action when a HubSpot private app token is accidentally exposed in a public repository?

Accepted Answer

Rotate the token immediately within the private app settings

Answer

Private apps support token rotation — generating a new token instantly invalidates the old one without needing to recreate the entire app.

Question 3

In HubSpot, which type of OAuth scope would a private app need to read and write contact records?

Accepted Answer

crm.objects.contacts.read and crm.objects.contacts.write

Answer

HubSpot's private app scopes follow the pattern crm.objects.[object].read and crm.objects.[object].write for granular CRM access control.

Question 4

A HubSpot admin wants to ensure that users only see contacts owned by themselves or their team. Which setting achieves this?

Accepted Answer

Configure team-based CRM record access in user permissions

Answer

Team-based CRM record access permissions can be configured so users only see records they own or that belong to their team.

Question 5

What HubSpot feature allows an admin to see a consolidated log of significant account-level actions such as user invitations, permission changes, and SSO configuration edits?

Accepted Answer

Account audit log

Answer

The account audit log (available on higher-tier plans) records admin-level actions like permission changes, user management events, and security setting modifications.

(HAC) HubSpot Administrator Certification Practice Test

(HAC) HubSpot Administrator Certification Practice Test

HAC Security & Authentication 4