PD1 Security Model 4

Question 1

What is the minimum access level that Apex Managed Sharing can grant on a custom object record?

Accepted Answer

Read Only

Answer

Apex Managed Sharing can grant Read Only, Read/Write, or Full Access, but the minimum non-trivial access level is Read Only.

Question 2

When using 'without sharing' in Apex, what happens to CRUD and FLS enforcement?

Accepted Answer

Neither CRUD nor FLS is enforced unless explicitly checked

Answer

'Without sharing' only affects record-level sharing; CRUD and FLS are still not automatically enforced in Apex unless the developer explicitly checks them.

Question 3

A developer needs to allow a community (Experience Cloud) guest user to read certain records. Which sharing mechanism supports this?

Accepted Answer

Guest user sharing rules

Answer

Guest user sharing rules allow unauthenticated Experience Cloud users to access records that meet specific criteria.

Question 4

Which Apex Database method enforces both FLS and CRUD when performing DML?

Accepted Answer

Database.insert(record, AccessLevel.USER_MODE)

Answer

Passing AccessLevel.USER_MODE to Database DML methods enforces the running user's CRUD and FLS permissions during the operation.

Question 5

What happens to Apex Managed Sharing records when a record's OWD is changed from Private to Public Read/Write?

Accepted Answer

Sharing records are automatically deleted by Salesforce

Answer

When OWD is changed to a more permissive setting, Salesforce automatically deletes Apex Managed Sharing records because they are no longer needed.

(PD1) Salesforce Certified Platform Developer 1 Practice Test

(PD1) Salesforce Certified Platform Developer 1 Practice Test

PD1 Security Model 4