SP Network Fundamentals 5

Question 1

Which protocol is used by Salesforce Shield Platform Encryption to secure data at the transport layer?

Accepted Answer

TLS (Transport Layer Security)

Answer

IPsec

Answer

SSH (Secure Shell)

Answer

SFTP (Secure File Transfer Protocol)

Question 2

An organization uses Salesforce with a SAML SSO identity provider. Which network port must be open between the IdP and the user's browser?

Accepted Answer

Port 443 (HTTPS)

Answer

Port 21 (FTP)

Answer

Port 389 (LDAP)

Answer

Port 1194 (OpenVPN)

Question 3

What does BGP (Border Gateway Protocol) primarily manage?

Accepted Answer

Routing between different autonomous systems on the internet

Answer

Dynamic IP assignment within a LAN

Answer

DNS name resolution for internal domains

Answer

SSL certificate issuance and renewal

Question 4

When a Salesforce org's My Domain is enabled, what type of DNS record must be created for the custom subdomain?

Accepted Answer

CNAME record pointing to Salesforce infrastructure

Answer

MX record pointing to Salesforce mail servers

Answer

PTR record for reverse DNS lookup

Answer

NS record delegating the zone to Salesforce

Question 5

Which network security concept ensures that no single point of failure exists in network connectivity to Salesforce?

Accepted Answer

Network redundancy with multiple ISP links and failover routing

Answer

Installing antivirus software on all endpoints

Answer

Using a single high-bandwidth dedicated line

Answer

Configuring all users with static IP addresses

Question 6

What is the purpose of QoS (Quality of Service) policies in a network supporting Salesforce real-time collaboration features like Salesforce Meetings?

Accepted Answer

To prioritize voice and video traffic to reduce jitter and latency

Answer

To block unauthorized Salesforce API calls

Answer

To encrypt all Salesforce data at rest

Answer

To assign user permissions based on network location

Question 7

A network administrator needs to allow Salesforce streaming API (CometD) through a corporate firewall. What must be ensured?

Accepted Answer

Port 443 must support persistent HTTPS connections without premature timeout

Answer

Port 80 must be open for long-polling HTTP connections

Answer

Port 8443 must be opened as an alternative HTTPS port

Answer

The firewall must allow UDP traffic on port 443