HAC Security & Authentication 5

Question 1

What happens to data managed under a HubSpot integration when its connected app is uninstalled from the portal?

Accepted Answer

The app loses API access but data already synced into HubSpot remains

Answer

Uninstalling an app revokes its API access and stops future syncs, but data already written into HubSpot by the integration is not automatically deleted.

Question 2

Which authentication method should a HubSpot admin configure to allow a third-party tool to send data INTO HubSpot without a user acting as the authenticator?

Accepted Answer

A private app token with appropriate write scopes

Answer

Private app tokens are designed for server-to-server integrations where no human user is present to authorize the OAuth flow.

Question 3

In HubSpot's two-factor authentication setup, which 2FA methods are supported for users?

Accepted Answer

Authenticator app and SMS

Answer

HubSpot supports two 2FA methods: time-based one-time password (TOTP) via an authenticator app, and SMS text message codes.

Question 4

What is the primary risk of sharing a single HubSpot user account login across multiple employees in a team?

Accepted Answer

It makes audit logs unreliable because actions cannot be attributed to specific individuals

Answer

Shared logins obscure individual accountability in audit logs, making it impossible to determine which person performed sensitive actions.

Question 5

A developer requests access to read HubSpot deal data for a reporting integration. Which principle should guide the scopes granted to their private app?

Accepted Answer

Grant only the crm.objects.deals.read scope following least-privilege

Answer

Least-privilege means granting only the minimum scopes necessary for the integration's stated purpose — in this case, reading deals only.

(HAC) HubSpot Administrator Certification Practice Test

(HAC) HubSpot Administrator Certification Practice Test

HAC Security & Authentication 5