SAA Security & Access Management 3

Question 1

A company integrates Salesforce with an external system using a connected app. Which OAuth flow is most appropriate for a server-to-server integration with no user interaction?

Accepted Answer

JWT Bearer Token Flow

Answer

The JWT Bearer Token Flow enables server-to-server integrations by allowing a connected app to authenticate using a digital certificate without user interaction.

Question 2

What does the 'Modify All Data' permission allow a user to do that 'View All Data' does not?

Accepted Answer

Create, edit, and delete all records regardless of sharing settings

Answer

'Modify All Data' grants full CRUD access to every record in the org, while 'View All Data' only grants read access across all records.

Question 3

An architect is designing a Customer Community where external users should only see their own cases. Which OWD setting achieves this for the Case object?

Accepted Answer

Private

Answer

Setting Case OWD to Private ensures that users can only see records they own, which is the baseline for community user isolation.

Question 4

Which Salesforce feature enables administrators to track who viewed, exported, or changed sensitive records?

Accepted Answer

Event Monitoring

Answer

Event Monitoring provides detailed logs of user actions including record views, exports, API calls, and logins, enabling security and compliance auditing.

Question 5

A profile has 'Read' access to Opportunity but a permission set assigned to the user grants 'Edit' on Opportunity. What is the effective permission?

Accepted Answer

Edit, because permissions are additive — the most permissive level applies

Answer

Salesforce permissions are additive; if any profile or permission set grants a higher level of access, that higher level is the effective permission.

(SAA) Salesforce Application Architect Certification Practice Test

(SAA) Salesforce Application Architect Certification Practice Test

SAA Security & Access Management 3