Free Plat-Admn-301 sample questions

Correct answer: Create an owner-based sharing rule sharing Opportunities owned by the North American Sales Team Role with the European Sales Director Role.

An owner-based sharing rule is the optimal solution here. It allows the administrator to share records owned by a specific group (North American Sales Team Role) with another specific user or group (European Sales Director Role) with 'Read Only' access. This is more maintainable than manual sharing and more specific than opening up the hierarchy globally.

Correct answer: Delegated Administrators cannot manage sharing rules; they can only manage users and custom objects fields.

Delegated Administration allows users to manage specific users (create, edit, reset passwords) and manage custom object structures (fields, page layouts), but it does NOT grant the ability to modify the sharing model or create sharing rules. Sharing settings are a system-level security feature reserved for System Administrators.

Correct answer: Role Hierarchy grants access vertically, not horizontally across siblings.

The Role Hierarchy grants access using a vertical mechanism: managers gain access to data owned by their subordinates. It does NOT grant 'horizontal' access. Peers in the hierarchy (like Western Sales and Eastern Sales) do not inherently see each other's data unless a Sharing Rule or other mechanism is explicitly configured. graph TD VP[VP of Sales] --> Western[Western Sales Role] VP --> Eastern[Eastern Sales Role] Western --> RepW[Western Rep] Eastern --> RepE[Eastern Rep] style VP fill:#f9f,stroke:#333,stroke-width:2px style Western fill:#bbf,stroke:#333,stroke-width:2px style Eastern fill:#bbf,stroke:#333,stroke-width:2px

Correct answer: Case Access was not defined in the Account Team roles or default team settings.

When enabling Account Teams, granting access to the Account does not automatically grant access to related objects like Cases or Opportunities if those objects are set to Private. You must explicitly configure the 'Case Access' level (Read Only or Read/Write) within the Account Team settings or when adding team members.

Correct answer: Create a Muting Permission Set within the Permission Set Group and mute the 'Delete' permission for Leads.

Muting Permission Sets are specifically designed for this scenario. They allow you to include broad permission sets in a Permission Set Group but 'mute' (disable) specific permissions for that group only, without altering the original permission sets which might be used elsewhere.

Correct answer: This configuration is not supported; Salesforce MFA requirements do not allow skipping MFA based on IP address/location.

According to Salesforce's official MFA requirements and best practices, MFA should be enforced for every login. While you can use 'Trusted IP Ranges' to bypass email verification for browser activation, Salesforce does not support bypassing the strong MFA requirement (like Salesforce Authenticator) based solely on IP address for internal users, as IP spoofing is a security risk. The correct stance for the exam is that MFA is required regardless of location for compliance.