A timed, blueprint-proportional exam drawn fresh from this bank — with a per-domain score report.
🔓 Free preview: showing 10 of 60 questions. Unlock the full bank — every question, explanation, and reference.
Unlock all 60 questions →10 questions across 8 topics. Choose an answer for each question, then check it to see the correct answer and explanation.
Filter by topic
6 questions in Security and Access
Advanced sharing, territory management, permission set groups, restriction rules, and delegated administration.
A company must grant account access based on geographic regions and product lines, where sales reps can belong to multiple regions at once — something the single role hierarchy cannot model. Which feature should the administrator implement?
Opportunities have a Private org-wide default. All users in the 'Strategic Deals' public group must see (but not edit) opportunities where the custom field Tier = 'Strategic', regardless of owner. What should the administrator create?
An administrator bundles several permission sets into a permission set group for the support team, but one permission set in the bundle includes 'Delete' on Cases, which support agents must NOT have. How can the admin remove just that permission without unbundling?
Interns share the same profile as full employees, but must see only Task records they own — even though sharing settings would grant broader access. Which feature enforces this record-level restriction for just the interns?
The admin team wants regional team leads to reset passwords and unlock users for their own teams only, without granting full administrative rights. Which feature supports this?
Security policy requires that users on the 'Finance' profile can log in only from the office network range and only during business hours. Where should the administrator configure this?