SECURITY-AND-PRIVACY-ACCREDITED-PROFESSIONAL Online Practice Questions and Answers

What two selections are available at the field level when building policies to manage data subject rights

A. Refresh

B. Delete

C. Retain

D. Insert

User in one of the monitored orgs has been granted the 'Modify All Data' permission. Where can the consultant see how the permission was granted?

A. View the Configuration Metrics detail page.

B. View the detail page of the 'View All Data' metric, and check the Context column on the change for the user.

C. See the Permissions dashboard.

D. View the detail page of the 'Modify All Data' metric, and check the Context column on the change for the user.

When is data from a newly connected tenant updated in the Security Center App?

A. Upon triggering the refresh

B. During the next daily update

C. Immediately

D. When the API is called

How do customers access Field Audit Trail data?

A. Event Log Files

B. Set-up Audit Trail

C. Salesforce API

D. Pre-built Tableau CRM app

You need to limit when and where from users can access Salesforce- to help reduce the risks of unauthorized access. How should you go about this?

A. Restrict Access based on Login IP Addresses but login hairs can't be set up in conjunction with this feature

B. Use MFA to help ensure users are using a more secure login process

C. Restrict Access based on Login IP Addresses and use the Login Hours feature together

D. Do not allow users to access Salesforce from outside the office.

Which feature in Heroku allows an organization to generate a URL that can be used to download selected data in various formats?

A. Heroku Kafka

B. Heroku Postgres Dataclips

C. Heroku Redis

D. Heroku Connect

Can a customer run a penetration test against Salesforce?

A. Some types of penetration testing are permitted, but not in production

B. No, this is not permitted under any circumstances

C. Penetration testing is allowed, but the Salesforce Agreement needs to be signed before testing can comment

D. Penetration testing can be carried out at anytime by anyone

What are two differences between MFA and Device Activation?

A. Users can opt out of receiving Device Activation challenges, but can't opt out of MFA challenges

B. MFA challenges users on every login; Device Activation challenges users only when they log in from a new device

C. Device Activation allows SMS as a verification method while MFA does not

D. MFA is enabled for all users by default, admins must enable Device Activation

Which three standard authentication protocols does Salesforce support to integrate external applications using APIs?

A. OpenID Connect

B. Single Sign On (SSO)

C. OMFA

D. Security Assertion Markup Language (SAML)

E. OAuth

Within Data Mask, which operators are available for the DATETIME field type when using the data filter?

A. is prior to, is within, is after

B. is before, is within, is after

C. is before, is after, is between

D. yesterday, today, a month ago