SAA Security & Access Management 2

Question 1

A company wants to ensure that users can only access Salesforce from their corporate network. Which feature should an architect configure?

Accepted Answer

Login IP Ranges on profiles

Answer

Login IP Ranges set on a profile restrict users with that profile to logging in only from specified IP addresses.

Question 2

Which Salesforce feature allows an administrator to automatically log out inactive users after a specified period?

Accepted Answer

Session Timeout policy in Security Settings

Answer

Session Timeout settings in Security Settings define how long an inactive session persists before automatic logout.

Question 3

A Salesforce org uses Territory Management. How does territory assignment affect record access?

Accepted Answer

Territories grant access to accounts and related records beyond role hierarchy

Answer

Enterprise Territory Management extends account and related record access to users assigned to matching territories, independent of the role hierarchy.

Question 4

What is the purpose of the 'Grant Login Access' feature in Salesforce?

Accepted Answer

Allows users to delegate login access to administrators or partners for support

Answer

Grant Login Access lets users authorize administrators or Salesforce Support to log in as them for troubleshooting purposes.

Question 5

Which object-level security mechanism prevents a user from even knowing a particular object exists in Salesforce?

Accepted Answer

Setting Tab visibility to 'Tab Hidden' and removing object permissions

Answer

Removing object permissions (Read, Create, etc.) from a profile and hiding the tab prevents users from seeing or interacting with that object entirely.

(SAA) Salesforce Application Architect Certification Practice Test

(SAA) Salesforce Application Architect Certification Practice Test

SAA Security & Access Management 2