Plat-Arch-205 sample questions

Question 1

A multinational financial services firm utilizes Permission Set Groups to manage user access based on job functions. The 'European Sales' group includes permission sets for 'Sales Core', 'GDPR Compliance', and 'Contract Editing'. However, a subset of interns within the European Sales team must not have the ability to delete Contracts, which is currently granted by the 'Contract Editing' permission set included in the group. How should the architect fulfill this requirement using the principle of least privilege without creating excessive new permission sets?

Accepted Answer

Create a new Permission Set Group specifically for interns that includes 'Sales Core', 'GDPR Compliance', and 'Contract Editing', then add a Muting Permission Set to this new group to disable Contract Delete.

Answer

Clone the 'Contract Editing' permission set, remove the Delete permission, and create a new Permission Set Group for interns.

Answer

Create a Muting Permission Set within the existing 'European Sales' group to mute the Delete permission, then assign this muting set to the interns.

Answer

Use a Restriction Rule on the Contract object to prevent interns from deleting records.

Question 2

Universal Containers creates a custom Lightning Web Component that allows users to search for and view 'Confidential_Project__c' records. The component uses a custom Apex controller to perform the SOQL query. A developer realizes that users can see fields in the component that their profile restricts via Field-Level Security (FLS). Which Apex feature should be implemented in the query to strictly enforce FLS and object permissions within the SOQL statement?

Accepted Answer

Add the WITH SECURITY_ENFORCED clause to the SOQL query.

Answer

Use the 'with sharing' keyword on the Apex class definition.

Answer

Call the Schema.describeSObjects() method before the query.

Answer

Wrap the code in a System.runAs(user) block.

Question 3

A healthcare organization stores patient SSNs in a custom field `SSN__c`. For compliance, this field must be encrypted at rest, but specific compliance officers need to search for patients using the last 4 digits of the SSN. Which encryption strategy supports this requirement?

Accepted Answer

Use Shield Platform Encryption with Deterministic Encryption.

Answer

Use Classic Encryption (Encrypted Text field) with a mask type of 'Last 4 digits clear'.

Answer

Use Shield Platform Encryption with Probabilistic Encryption.

Answer

Implement a custom Apex trigger to hash the SSN into a separate search field.

Question 4

In an Apex Class performing a secure update, the method `Security.____(AccessType.UPDATABLE, records)` is used to strip fields from the list of records that the current user does not have permission to update.

Accepted Answer

stripInaccessible

Answer

enforceSecurity

Answer

checkPermission

Answer

removeRestricted

Question 5

A Platform Architect is designing a security model for a 'Performance_Review__c' object. The requirement states that Managers should only be able to view the 'Rating__c' field for their direct reports during the 'Review Period'. At all other times, this field should be hidden from everyone except HR. Which solution best addresses this temporal requirement?

Accepted Answer

Create a Session-Based Permission Set granting Read access to 'Rating__c'. Use a Flow to activate this permission set for Managers only when the Review Period is active.

Answer

Create a scheduled Apex job that updates the Profile FLS for the 'Rating__c' field at the start and end of the review period.

Answer

Use Dynamic Forms to hide the 'Rating__c' field on the Lightning Page based on a custom 'Is_Review_Period__c' formula field.

Answer

Create two Page Layouts, one with the field and one without. Use a Record Type to switch layouts based on the date.

Question 6

True or False: Removing a field from a Page Layout ensures that users cannot access that field's data via Reports or the API.

Accepted Answer

False

Answer

True

Top vendors

Top exams

Free Plat-Arch-205 sample questions

A healthcare organization stores patient SSNs in a custom field `SSN__c`. For compliance, this field must be encrypted at rest, but specific compliance officers need to search for patients using the last 4 digits of the SSN. Which encryption strategy supports this requirement?

In an Apex Class performing a secure update, the method `Security.____(AccessType.UPDATABLE, records)` is used to strip fields from the list of records that the current user does not have permission to update.

True or False: Removing a field from a Page Layout ensures that users cannot access that field's data via Reports or the API.

6 more free samples are waiting