Practice Test Geeks(HCT) HubSpot Certified Trainer Practice Test
← All HCT Flashcard Decks

Security & Access Management Flashcards

7 cards from real HCT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security & Access Management flashcards as text

  1. Where can a HubSpot Super Admin view a log of changes made to portal settings, including who made each change?

    Answer: Settings > Account > Audit Log

    HubSpot's Audit Log (available on Enterprise plans) records admin actions including settings changes, user modifications, and integration activity.

  2. A HubSpot trainer discovers that a former employee's account was not deactivated after they left the company. What is the immediate risk?

    Answer: The former employee may still access and modify CRM data or export contact lists

    Active accounts for departed employees present a real risk of unauthorized data access or extraction until the accounts are deactivated.

  3. What is the difference between 'deactivating' and 'deleting' a HubSpot user?

    Answer: Deactivating blocks login but preserves record ownership; deleting removes the user and reassigns their records

    Deactivating a user blocks their portal access while keeping their records intact; deletion removes the user account and prompts record reassignment.

  4. A client's HubSpot portal stores sensitive health information. Which compliance framework does HubSpot's Business Associate Agreement (BAA) support?

    Answer: HIPAA

    HubSpot offers a Business Associate Agreement to support HIPAA compliance for portals handling protected health information (PHI).

  5. A trainer is reviewing a client's connected app integrations. Which action should they take for apps that are no longer in use?

    Answer: Revoke the app's access token and disconnect the integration

    Unused integrations should be fully disconnected and their tokens revoked to eliminate unnecessary access vectors and reduce attack surface.

  6. In HubSpot, which report helps admins identify users who have not logged in recently and may need account review?

    Answer: Settings > Users & Teams > Last Login column

    The Users & Teams list in HubSpot settings displays a 'Last Login' column that admins can sort to identify inactive accounts.

  7. A HubSpot trainer recommends that a client enable email notifications for suspicious login activity. Where is this setting configured?

    Answer: Profile & Preferences > Security > Login Notifications

    Individual users can enable login notification emails from their Profile & Preferences > Security section to be alerted of unrecognized sign-in attempts.