SP Cheat Sheet 2026

The 30 highest-yield SP facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Which Apex method converts a Datetime to a formatted String? → Datetime.format()
2. An org needs to enforce that only one Opportunity can be in 'Closed Won' status per Account at a time. Which tool best enforces this cross-record validation? → Apex Trigger with SOQL aggregate check
3. Which contract component defines the specific deliverables, timelines, and acceptance criteria for a Salesforce Service Provider engagement? → Statement of Work (SOW)
4. A team is using GitFlow. After completing a hotfix branch merged into main, what additional step is required per GitFlow conventions? → Merge the hotfix branch back into the develop branch as well
5. When configuring Salesforce for an organization that uses a forward proxy, what must be done to allow Salesforce callouts? → Add Salesforce IP ranges to the proxy's allowlist
6. Which Apex collection method checks if a key exists in a Map before accessing its value to avoid null errors? → Map.containsKey(key)
7. Which Salesforce feature allows service providers to enforce data residency requirements by storing specific records in designated geographic regions? → Salesforce Hyperforce with local region deployment
8. Under the Salesforce Partner Code of Conduct, which behavior could result in a Service Provider's partner status being revoked? → Misrepresenting Salesforce certifications or partner tier to win a deal
9. Which action should a Salesforce admin take immediately upon discovering that an employee's credentials have been compromised? → Freeze the user account, revoke active sessions, and rotate credentials
10. A Salesforce Service Provider is asked to handle customer PII on behalf of a client. Which document primarily governs how the SP may process that data? → Data Processing Agreement (DPA)
11. Which statement best describes a unit test in the context of Salesforce Apex development? → A test that validates a single method or small unit of code in isolation from dependencies
12. Under the Salesforce Shared Responsibility Model, which of the following is the customer's (and Service Provider's) responsibility — NOT Salesforce's? → User access management and data classification
13. Which Salesforce concept allows a subset of an unlocked package to be exposed to dependent packages without exposing all internal components? → Package Visibility (public vs. global access modifiers)
14. What does the `@AuraEnabled` annotation do in an Apex class? → Exposes a method to Lightning components
15. What is the key advantage of using a trie (prefix tree) over a hash table for autocomplete-style functionality in a custom Salesforce Lightning component? → Efficient prefix-based search without hashing all prefixes
16. What is the primary purpose of the SP certification program? → To validate professional competence and knowledge in the field
17. In Salesforce SOQL, which aggregate function returns the total sum of a numeric field across a set of records? → SUM()
18. Which Salesforce tool allows developers to run Apex tests directly from the command line as part of a CI/CD pipeline? → Salesforce DX CLI (sf apex run test)
19. What is the maximum number of custom fields allowed on a standard Salesforce object such as Account? → 800
20. Which IP addressing version supports 128-bit addresses and was designed to solve IPv4 address exhaustion? → IPv6
21. In Salesforce, what happens to a roll-up summary field when the child records associated with a master record are deleted? → The field recalculates automatically
22. A hospitality company wants to manage group bookings and event sales in Salesforce. Which product provides built-in event management capabilities? → Salesforce for Hospitality with Event Management
23. What does TTL (Time to Live) control in a DNS record? → How long a DNS response is cached before being refreshed
24. What is the DRY principle in programming? → Dont Repeat Yourself — avoid code duplication
25. Which of these is an example of a financial service provider? → Bank of America
26. An organization uses Salesforce with a SAML SSO identity provider. Which network port must be open between the IdP and the user's browser? → Port 443 (HTTPS)
27. Why is it a bad practice to use hardcoded IDs (e.g., `'0015000000XXXXX'`) in Apex test classes? → IDs are org-specific and will cause tests to fail when deployed to any other org
28. Why is stakeholder management important in projects? → Because stakeholder support and engagement are critical to project success
29. What governor limit concern arises when using recursive Apex methods to traverse deep data hierarchies in Salesforce? → Stack depth limit
30. A SP engagement involves migrating data from a legacy system into Salesforce. Which compliance consideration is MOST critical during the data migration phase? → Validating that data transfer complies with applicable data residency and privacy laws