PD1 Security Model 5

Question 1

A developer is building a Visualforce page controller. Which approach correctly enforces field-level security before displaying sensitive data?

Accepted Answer

Use Schema.DescribeFieldResult.isAccessible() before referencing the field value

Answer

Checking isAccessible() on the DescribeFieldResult before displaying a field value is the correct way to enforce FLS in Apex/Visualforce controllers.

Question 2

What is the effect of enabling 'Modify All' object permission on a profile for a specific object?

Accepted Answer

Allows full CRUD on that object and overrides sharing rules for records of that type

Answer

'Modify All' on an object grants full CRUD access and overrides the org's sharing model for that specific object, similar to 'Modify All Data' but scoped to one object.

Question 3

In a multi-layered security model, which layer is evaluated LAST when determining if a user can access a record's field?

Accepted Answer

Field-Level Security (FLS)

Answer

Salesforce evaluates object permissions first, then record-level sharing, and finally field-level security — FLS is the most granular and last layer checked.

Question 4

Which sharing mechanism should a developer use when business logic requires sharing records with users dynamically at runtime based on complex conditions?

Accepted Answer

Apex Managed Sharing

Answer

Apex Managed Sharing allows developers to programmatically share records at runtime based on any custom business logic that cannot be expressed in declarative sharing rules.

Question 5

A developer queries Accounts using SOQL in a class declared 'with sharing'. The running user is a standard user with OWD set to Private. What records are returned?

Accepted Answer

Only Accounts the user owns or has been explicitly shared with

Answer

In a 'with sharing' class, SOQL respects the running user's record visibility, so only records the user owns or that are shared with them via any sharing mechanism are returned.

(PD1) Salesforce Certified Platform Developer 1 Practice Test

(PD1) Salesforce Certified Platform Developer 1 Practice Test

PD1 Security Model 5