[2024年03月] 問題集簡単概要Sharing-and-Visibility-Architect試験問題JPNTest
Sharing-and-Visibility-Architectトレーニング認証最新版をゲットSalesforce Architect
Salesforce認定の共有および可視性アーキテクトになるには、候補者は、Salesforceデータアーキテクチャとセキュリティモデルを強く理解し、さまざまなビジネスシナリオの共有および可視性ソリューションの設計と実装の経験が必要です。この試験では、データ共有と可視性、記録アクセス、セキュリティモデル、データプライバシー、データガバナンスなど、幅広いトピックをカバーしています。
Salesforce Certified Sharing and Visibility Architect認定は、Salesforceのセキュリティと共有モデルの幅広い知識を持つアーキテクトを対象として設計されています。試験には、データセキュリティ、データ共有、ユーザーアクセス、レコードレベルのセキュリティなどのトピックがカバーされています。この認定の候補者は、Salesforceのセキュリティのベストプラクティスを深く理解し、セキュリティと共有モデルを実装する実際の経験を持っている必要があります。
Salesforce Certified Sharing and Visibility Architect認定は、Salesforceエコシステムでキャリアを進めたいプロフェッショナルにとって貴重な資格です。この認定は、Salesforceで複雑な共有および可視性ソリューションを設計および実装するスキルと知識を個人の能力を検証し、世界中のトップ企業や組織に認められています。適切な準備と経験を持つ候補者は、Salesforce Sharing-and-Visibility-Architect試験に合格し、この貴重な認定を取得することができます。
質問 # 44
Universal Containers uses Standard WorkOrder object to track various work orders sent to field agents. Currently, the WorkOrder object has more than 400 fields. There are eight different types of work order processes established. The Director of Customer Service wants to ensure that field agents gets to see only required information specific to the WorkOrder type they are addressing.
Which option is recommended to implement this requirement?
- A. Use Dynamic form to add different page sections and control visibility of sections by Work Order RecordType value,
- B. Use a custom LWC to override the view action of WorkOrder with custom metadata type defining relevant fields per WorkOrder type
- C. Use different page layouts per work order type with different sections representing key information about the specific work order type.
正解：A
質問 # 45
A sales representative at Universal Containers needs assistance from specific product managers when selling certain deals. Product managers do not have access to opportunities they don't own, as the sharing model is Private, but need to gain access when they are assisting with a specific deal. How can an Architect accomplish the requirement?
- A. Use similar opportunities to share opportunities related to the product manager.
- B. Create a sharing rule to allow the product manager to access the opportunity.
- C. Enable account team and allow users to add the product manager.
- D. Enable opportunity teams and allow users to add the product manager.
正解：D
解説：
Explanation
Enabling opportunity teams and allowing users to add the product manager is the best way to accomplish the requirement, as it allows for granular and flexible sharing of opportunities with specific users who are involved in the deal. Creating a sharing rule to allow the product manager to access the opportunity is not feasible, as it would require a criteria or an owner-based rule that would apply to all product managers and opportunities, not just specific ones. Enabling account team and allowing users to add the product manager is not sufficient, as it would only grant access to the account, not the opportunity. Using similar opportunities to share opportunities related to the product manager is not relevant, as it is a feature that helps users find and update similar opportunities based on fields and filters
質問 # 46
What vulnerability can exist when controllers use dynamic rather than static queries and bind variables?
- A. Buffer Overflow Attacks.
- B. Cross-site scripting.
- C. SOQL Injection.
- D. Record Access Override.
正解：C
解説：
Explanation
SOQL injection is a vulnerability that can exist when controllers use dynamic rather than static queries and bind variables. SOQL injection is a technique that exploits a security vulnerability by inserting malicious SOQL statements into an existing query. This can result in data loss, data exposure, or unauthorized access1.
Buffer overflow attacks, cross-site scripting, and record access override are not vulnerabilities related to dynamic queries and bind variables.
質問 # 47
User A at Universal Containers is in the default account team for User B.
User B owns the ACME account and changed User A's team member access to the account.
What is the impact of this change?
- A. Changes affect the default Opportunity team.
- B. Changes affect the default Account team.
- C. Changes affect only the ACME Account
- D. Changes affect all child ACME Accounts.
正解：C
質問 # 48
Universal Containers (UC) uses a custom Visualforce page to display shipment tracking information (custom object, private OWD) to field manager and agents. The IT team wants to make sure that users have access to only the information that is allowed.
Which Apex method must be used to make sure only allowed fields are shown to the users?
- A. isAccessible()
- B. isViewable()
- C. isReadable()
- D. isShowable()
正解：A
解説：
Explanation
The Apex method that must be used to make sure only allowed fields are shown to the users is isAccessible(). This method returns true if the user has read access to the field, and false otherwise2.
isReadable(), isShowable(), and isViewable() are not valid Apex methods for checking field-level security.
質問 # 49
Sales manager at universal containers (UC) have requested viewing customer invoices in Salesforce. Invoice data is mastered in the ERP system. The architect at UC decided to surface the customer invoices in salesforce using external objects and did the following:
-Configured an external object called Invoice.
-Created a lookup relationship between account and the invoice.
How can the architect grant the sales managers access to the customer invoices data?
- A. By creating controlling the invoices object permission on the sales manager's profile.
- B. By creating a sharing set to share invoices with users in sales manager role.
- C. By creating manual sharing to share invoices with relevant sales managers.
- D. By creating sharing rules to share the invoices records with users in sales mangers roles.
正解：A
解説：
Explanation
Controlling the invoices object permission on the sales manager's profile is how the architect can grant the sales managers access to the customer invoices data. Object permissions determine whether a user can create, read, edit, or delete any record of that object. Since invoice data is surfaced in Salesforce using external objects, sales managers need to have at least read permission on the invoice object to view the customer invoices data. Option A is incorrect, since sharing rules are not available for external objects. Option B is incorrect, since manual sharing is not available for external objects. Option D is incorrect, since sharing sets are not available for external objects.
質問 # 50
Universal Containers has recently activated an integration that synchronizes customer information and orders into their CRM of choice: Salesforce.com. One of their largest customers, United Air, has over 12,000 unique contacts. Since the integration was activated, sales reps are having trouble adding contacts to the United Air account. When a sales rep adds a contact, they get the following error message: UNABLE_TO_LOCK_ROW, this issue seems to affect the United Air account and several other large customers. The sales rep can usually save the contact by trying again later in the evening. What should the Architect recommend as a possible solution?
- A. Remove sharing rules and replace them with Apex sharing for Unite Air and the other large accounts.
- B. Implement an account hierarchy and redistribute the contacts evenly under the child accounts.
- C. Create a permission set for the sales team to grant them Read/Write access to all account fields.
- D. Add a role-based sharing rule so all sales team members have Read/Write access to contacts.
正解：B
解説：
Explanation
Implementing an account hierarchy and redistributing the contacts evenly under the child accounts is a possible solution to avoid locking errors. This way, the contacts are not associated with a single parent account, and the integration can insert or update them without conflicting with other transactions. The other options do not address the root cause of the locking errors, which is the high number of child records under one parent record.
質問 # 51
Universal Computers (UC) is looking to expand its delivery capabilities through a network of distributors that use a Partner Community license. UC employees currently can view all delivery records through the organization-wide default (OWD) setting of Public Read Only.
Which approach would an architect recommend to limit the records a distributor can see?
- A. Remove Read permission from the distributor profile.
- B. Set the External OWD to Private for the Delivery object.
- C. Create a criteria-based sharing rule to grant access to the distributor
- D. Create an ownership-based sharing rule to grant access to the distributor.
正解：B
解説：
Explanation
Setting the External OWD to Private for the Delivery object is the best approach to limit the records a distributor can see, since it will restrict the access to only the records they own or are shared with them. Option A is incorrect, since ownership-based sharing rules are not available for partner community users. Option B is incorrect, since removing Read permission from the distributor profile would prevent them from accessing any delivery records. Option D is incorrect, since criteria-based sharing rules are not available for partner community users.
質問 # 52
Universal Containers maintains Job information in a Custom Object that contains sensitive information. The only users who should be able to view and edit Job records are the user who owns the record and all users in the Delivery profile. Which three platform sharing tools are required to support the above requirements?
Choose 3 answers.
- A. Grant access Using Hierarchy sharing setting on the Job Object set to false.
- B. "View All Data" profile permission on the Delivery Profile.
- C. Organization-Wide Default sharing setting of Private on the Job Object.
- D. Criteria-Based sharing rule for the Delivery Profile on the Job Object.
- E. "Modify All" permission for Job Object on the Delivery Profile.
正解：A、C、E
質問 # 53
Universal Containers has set the Org-Wide Sharing Default for Accounts to Private and has created some sharing rules to extend access based on certain data access policies. An architect has been asked to review access to a certain set of key customer accounts. How might this review be conducted?
- A. Export the Account Share table and review.
- B. Log in as each user and Run the All Accounts List View.
- C. Use the Sharing button on each customer Account.
- D. Run a Report on Sharing in the Admin Console.
正解：A
質問 # 54
Universal Containers has successfully implemented a large Service Cloud rollout for their national call center 3 months ago. One of their largest customer accounts, United Automotive, has over 15,000 open cases. Agents are now having trouble opening new cases for United Automotive. When they try to create a case, the following Error messages appear for them UNABLE_TO_LOCK_ROW They notice that this only occurs for the United Automotive account. If they try to save the case again it will usually work, but the problem seems to be happening more and more often. What option should the Architect recommend?
- A. Review all Account sharing rules to ensure that the Customer Service team has Read/Write access to the United Automotive Account.
- B. Review all Case Sharing Rules and consolidate where appropriate to reduce the total number of sharing rules.
- C. Review the Account structure to split the United Automotive account into multiple branch accounts.
- D. Review the Customer Service Profile to ensure that they have Read/Write access to the appropriate Case and Account Fields.
正解：C
質問 # 55
Sales reps at Universal Containers (UC) complain about the manual activities they need to perform in order to grant access to supporting internal users (legal, engineering, finance, and so forth) for customer records when they need help. In general, the sales reps involved in the deals will not change.
How can a Salesforce architect help IK to Improve sales reps productivity?
- A. Create a criteria-based sharing rule to grant access to other users.
- B. Create a public group and replace the account ownership with it.
- C. Create a permission set with "view all data" and assign to supporting users.
- D. Leverage default Account team.
正解：A、D
質問 # 56
Universal Containers (UC) delivers training in 500 different regions. The UC Operations Users team manage course setup, scheduling, and trainer setup. The Operations Users team members work at a regional level and report to an Operations manager. The Operations manager requested access to edit ALL scheduled courses owned by the Operation Users team.
How can this be achieved?
- A. The Operations manager will get access to the scheduled courses by granting the Operations manager modify ALL on scheduled courses.
- B. The Operations manager will get access to the scheduled courses by creating a public group and add the Operations manager and the Operations Users team to the public group
- C. The Operations manager will get access to the scheduled courses by creating an ownership-based sharing rule and share the scheduled courses with the Operations manager.
- D. The Operations manager will get access to the scheduled courses owned by the Operations Users team defined in the role hierarchy.
正解：D
解説：
Explanation
Role hierarchy is a way to grant access to records based on the user's position in the organization. Users higher in the role hierarchy can access and edit records owned by users lower in the role hierarchy, unless the Grant Access Using Hierarchies option is disabled for a specific object. In this case, the Operations manager can access and edit all scheduled courses owned by the Operations Users team members who report to them in the role hierarchy. Therefore, the answer B is correct and the other options are incorrect
質問 # 57
Universal Containers has selected a small and diverse group of users to review inactive accounts. Given the Private sharing model, a public group was created and made available to this group of users. A sharing rule was created to make inactive Accounts visible to the public group. However, some of these users are reporting they don't see any of the Accounts that were shared with the public group.
What is the underlying issue for these users?
- A. The Accounts are owned by users higher in the role hierarchy.
- B. The users have a permission set that only allow Accounts in "Active" status.
- C. The users are in profiles that have no access to the Account object.
- D. The page layout assigned to these users is different than the Account owner.
正解：C
解説：
Explanation
The most likely reason why some users cannot see the accounts shared with the public group is that their profiles do not have access to the account object. Sharing rules and public groups cannot grant access to an object that is not enabled by the profile. Option A is incorrect, since permission sets do not control record status. Option B is incorrect, since the role hierarchy does not affect sharing rules. Option D is incorrect, since page layouts do not affect visibility
質問 # 58
Universal Containers (UC) implemented Sales Cloud and requested that sales agents have access to products the company sells and be able to create opportunities for its customers.
What should the Organization-Wide Defaults (OWD) be for pricebook?
- A. Use
- B. Pubic Read Write
- C. View
- D. Public Read Only
正解：A
質問 # 59
Universal Containers (UC) uses a custom lightning component with an Apex class to display shipment information (custom object, private OWD). UC sales managers are complaining about two important points:
* Shipment records that belong to their teams can be seen by other users.
* Shipment amount should be visible only by managers, but sales reps are able to view it.Which two features did the development team miss that is causing the problems?
Choose 2 answers.
- A. Use With Sharing keyword in Apex classes to enforce sharing rules evaluation.
- B. Use isSharable keyword in Apex classes to assure record visibility.
- C. Use runAs in test class to enforce user permissions and field-level permissions.
- D. Use isAccessible() method in Apex classes to check field accessibility
正解：A、D
質問 # 60
Universal Containers has just deployed a change to its role hierarchy. A manager is reporting that their staff can now see Accounts that they do not own and should not have access to. How should the Architect troubleshoot?
- A. While logged in as the one of the Staff members, navigate to a sample account and use the Sharing button to determine who has access.
- B. While logged in as the System Administrator, use the Field Accessibility Viewer to view a matrix of who has access to Accounts.
- C. While logged in as the one of the Staff members, navigate to their user record and inspect their profile and role membership.
- D. While logged in as the System Administrator, use the Field Accessibility Viewer to view a matrix of who has access to Accounts.
正解：A
解説：
Explanation
To troubleshoot why staff members can see accounts that they do not own and should not have access to after a change in the role hierarchy, the architect should log in as one of the staff members, navigate to a sample account, and use the sharing button to determine who has access. The sharing button shows all the reasons why a user has access to a record, such as role hierarchy, sharing rules, manual sharing, teams, etc. The architect can then identify which sharing mechanism is causing the issue and fix it accordingly
質問 # 61
Jane, a support representative at Universal Containers, created a report to view all her open cases that have been created in the past 7 days and saved the report in the "Private Reports" folder.
Who can view and run the report?
- A. The report owner and any users who have been given access to the "My Private Reports" folder
- B. The report owner and users with the "View All Data" permission
- C. The report owner
- D. The report owner and anybody in the role hierarchy above the report owner
正解：C
解説：
Explanation
The report owner is the only one who can view and run the report that is saved in the "Private Reports" folder.
Option A is incorrect, since there is no such thing as the "My Private Reports" folder in Salesforce. Option B is incorrect, since the role hierarchy does not affect the access to private reports. Option D is incorrect, since the "View All Data" permission does not grant access to private reports.
質問 # 62
Sales manager want their team members to help each other close Opportunities. The Opportunity and .. private. To grant Opportunity access to sales reps on the same team, ownership-based sharing rules ..
What is the side effect of this approach?
- A. All sales reps will have Read access to Accounts for all Opportunities.
- B. Sales Reps on the same team will have Edit access to the Accounts for Opportunity owned by their.
- C. All sales reps will have Read access to all Accounts.
- D. Sales reps on the same will have Read access to the Accounts for Opportunities owned by their.
正解：C
質問 # 63
Universal Containers has a requirement to share Accounts automatically to the users at a field office. They currently have the following setup in their environment:
* Accounts are set to Private in the Org-Wide Default.
* The field office is specified by a lookup in the Account object.
* There are 400 field offices.
* The users in each field office are managed using public groups.
Based upon a lookup relationship field on the Account, how should the Architect meet this requirement?
- A. Use Programmatic Sharing to share the Account with the appropriate field office.
- B. Use Criteria-Based Sharing to share the Account with the appropriate field office.
- C. Use Account Teams to share the Account with the appropriate field office.
- D. Use Manual Sharing to share the Account with the appropriate field office.
正解：A
解説：
Explanation
Programmatic sharing is the best option to share accounts automatically based on a lookup field, as it allows for more flexibility and scalability than manual sharing, account teams, or criteria-based sharing. Manual sharing is not automatic and requires user intervention. Account teams are not suitable for large numbers of users and accounts. Criteria-based sharing does not support lookup fields as criteria
質問 # 64
Universal Containers has developed an AppExchange managed package for their distribution partners, which required a private key to be generated for each partner and used by the code. Universal Containers support representatives must be able to access the private key value to debug connection issues, but it must not be possible for the partner to access the value.
How can the Architect best support this requirement?
- A. Store the value in an encrypted field on a custom object in the package.
- B. Store the value in a text field on a protected custom setting in the package.
- C. Store the value in a static variable in a class included in the managed package.
- D. Store the value in the text field on a list custom setting in the managed package.
正解：D
質問 # 65
......
認証トレーニングSharing-and-Visibility-Architect試験問題集テストエンジン：https://www.jpntest.com/shiken/Sharing-and-Visibility-Architect-mondaishu
Salesforce Architect Sharing-and-Visibility-Architectリアル試験問題と解答無料最新になります：https://drive.google.com/open?id=1oawVNVsf5aP6ar0dqFzbPzsSBMrNsHC-