PD1 Security Model 3

Question 1

Which Salesforce feature allows a developer to grant temporary elevated access to a record without permanently modifying sharing settings?

Accepted Answer

Manual Sharing

Answer

Manual Sharing allows record owners and administrators to share individual records with users or groups on a temporary, one-off basis.

Question 2

When an Apex class is declared with 'inherited sharing', what happens when it is called from a class declared 'without sharing'?

Accepted Answer

It runs without sharing, inheriting the caller's context

Answer

A class with 'inherited sharing' adopts the sharing context of its caller; if called from a 'without sharing' class, it runs without sharing.

Question 3

A developer queries the Contact object in Apex without specifying USER_MODE. Which security layer is NOT automatically enforced?

Accepted Answer

Both CRUD and FLS

Answer

In default system mode Apex, neither CRUD nor FLS is enforced automatically; developers must use Schema methods or USER_MODE to enforce them.

Question 4

Which method should a developer call to check if the running user has read access to a specific field before rendering it in Apex?

Accepted Answer

Schema.SObjectField.getDescribe().isAccessible()

Answer

Schema.SObjectField.getDescribe().isAccessible() returns true if the current user has read (FLS) access to that field.

Question 5

In the Salesforce sharing model, what does the 'Grant Access Using Hierarchies' setting control?

Accepted Answer

Whether role hierarchy grants record access above the owner's role

Answer

When enabled, 'Grant Access Using Hierarchies' allows users above a record owner in the role hierarchy to automatically gain access to that record.

(PD1) Salesforce Certified Platform Developer 1 Practice Test