In a private sharing model, what can supplement Role Hierarchy for record access? (Choose 3)
A. Forecasting
B. Sharing rules
C. Manual Sharing
D. Teams
E. Apex Managed Sharing
Answer: B, C, E
Sharing rules (auto), manual sharing (one-off), and Apex (code) are the core sharing tools beyond hierarchy. Forecasting and Teams are features, not core sharing mechanisms.
Criteria-based sharing rules share records based on field values, not ownership.
A. True
B. False
Answer: True
Example: Share all Cases where Status = “Critical”
Public groups simplify sharing rule creation.
A. True
B. False
Answer: True
Add users to a group once; all rules using that group update automatically.
(Setup > Public Groups)
Public groups can contain: other groups, users, roles, and ________.
A. Profile
B. Roles & subordinates
C. Managers
D. Permission Set
Answer: B
“Roles & subordinates” adds a role and everyone below it in the hierarchy to the group.
At Universal Container the organization-wide default for cases is set to Private. The management team wants several product specialists to assist with all cases that have been escalated. Only these product specialists need the ability to view and update all escalated cases. How can an administrator meet this requirement?
A. Create an ownership-based sharing rule for cases that gives read/write access to a role
B. Change the organization-wide default for cases to Public Read/Write
C. Create a criteria-based sharing rule for cases that gives read/write access to a public group
D. Create a new product specialist role in the role hierarchy which is above the VP of Services role
Answer: C
A criteria-based (FILTER) sharing rule can automatically give read/write access to only certain cases that meet the filter requirements, without opening access to all cases.
Ownership-based rules don’t filter by escalation
A Ownership-based rules don’t filter by escalation
B Makes all cases public — too broad
D Role hierarchy based on ownership, grants excessive, unintended access
What does Salesforce authenticate before allowing a user to log in through the user interface?
A. Whether the user’s profile is API enabled
B. Whether the organization has trusted IP addresses
C. Whether the user’s profile has login hour restrictions
D. Whether the user’s role has login IP range restrictions
Answer: C
Why the others are wrong:
A – API access is only checked for API (system) logins, not User logins.
B – Trusted IP ranges affect verification challenges, not whether login is authenticated.
D – Login IP restrictions are set on profiles, not roles.
Support users at Universal Container can view, create, and edit accounts. However, the management team does not want support users to delete accounts in the organization. How can an administrator meet this requirement?
A. Assign the Standard User profile to support users
B. Assign the Read Only profile to support users
C. Create a custom profile that has the View All permission enabled for the account object and assign the custom profile to support users
D. Create a custom profile that has the Delete permission disabled for the account object and assign the custom profile to support users
Answer: D
A custom profile lets the admin remove “Delete” access on Accounts.
Why the others are wrong:
A – Standard User profile allows Delete on Accounts by default.
B – Read Only profile can’t create or edit accounts.
C – View All doesn’t control delete access and doesn’t meet the requirement.
Which of the following profile permission will allow the User to edit any record, regardless of the Sharing Model?
A. Customize Application
B. View Setup and Configuration
C. View All Data
D. Modify All Data
E. None of the Above
Answer: D
“Modify All Data” and “View All Data” permissions override sharing rules.
The key word here is: “edit” so it’s not “View All” only “Modify All”
Which three of the following features can be utilized on a page layout? Choose 3 answers.
A. Make a field required
B. Make a field read-only
C. Make a field visible
D. Change a field label
Answer: A, B, C
Field label changes cannot be made on the page layout.
Custom Objects: “Set Up > Object Manager > Fields and Relationships”
Standard Objects: “Set Up > Rename Tabs & Labels”
A sales manager at UMS wants to rename and delete dashboards in the Nevada Dashboard Folder. How should a system administrator accomplish this?
A. Go to Nevada Sales Dashboard Folder, share, and choose Edit access for the Sales Manager
B. Go to Nevada Sales Dashboard Folder, share, and choose View access for the Sales Manager
C. Go to Nevada Sales Dashboard Folder, share, and choose Manage access for the Sales Manager
D. Go to Nevada Sales Dashboard Folder, share, and choose View access for the Sales Manager’s profile
Answer: C
“Manage” access is required to rename, delete, and control dashboards in the folder.
A – Edit lets users modify dashboard content, but not rename or delete dashboards.
B – View is read-only.
D – View still doesn’t allow rename/delete, even at the profile level.
Universal Container requires that its Salesforce account data, including attachments should be backed up weekly. Which tool should a system administrator use to accomplish this?
A. Data Loader
B. Data Export Service
C. Account Report Export
D. Account Analytic Snapshot
Answer: B
Setup > Data Export Service for data backup
A user is having trouble logging into Salesforce. The user’s login history shows that this person has attempted to log in multiple times and has been locked out of the organization. How can the system administrator help the user log into Salesforce?
A. Click Reset Password on the user record detail page
B. Log in as the user and enter a new password
C. Click unlock on the user record detail page
D. Send an email to the user containing the user password
Answer: A, C
Why the other options are wrong:
B – You can’t log in as a locked-out user.
D – Salesforce does not send passwords via email.
