SP Security Principles and Practices 3

Question 1

Which Salesforce org security setting determines how long an inactive session remains valid before requiring re-authentication?

Accepted Answer

Session Timeout

Answer

The Session Timeout setting specifies the idle time after which a user's session expires and they must log in again.

Question 2

A partner community user should only see Opportunity records owned by their own account team. Which sharing mechanism best achieves this?

Accepted Answer

Account relationship sharing (portal sharing)

Answer

Portal (account relationship) sharing automatically grants community users access to records associated with their account, limiting visibility to relevant data.

Question 3

What is the function of a 'Muting Permission Set' in a Permission Set Group?

Accepted Answer

Removes specific permissions granted by other permission sets in the group

Answer

A Muting Permission Set selectively revokes specific permissions within a Permission Set Group without removing the entire permission set.

Question 4

Which security control should be implemented to prevent users from exporting Salesforce data to external applications via API?

Accepted Answer

Disable API access in the user's profile

Answer

Removing API Enabled permission from a user's profile or permission set prevents that user from accessing Salesforce data via the API.

Question 5

What does Salesforce's 'Transaction Security' feature (part of Shield) allow?

Accepted Answer

Defines policies that trigger automated actions when specific events occur

Answer

Transaction Security lets admins create policies that monitor events (like logins or data exports) and automatically respond with actions such as blocking or notifying.

SP (Certified Service Provider) Practice Test

SP (Certified Service Provider) Practice Test

SP Security Principles and Practices 3