Salesforce Sharing-and-Visibility-Architect Certification All-in-One Exam Guide Sep-2025
Get Real Sharing-and-Visibility-Architect Exam Dumps [Sep-2025] Practice Tests
To pass Sharing-and-Visibility-Architect exam, candidates must have a thorough understanding of the Salesforce platform, including its security model, sharing rules, role hierarchy, profiles, permissions, and groups. They must also be able to design and implement complex sharing architectures that meet the needs of their organizations, while ensuring data security and compliance.
NEW QUESTION # 14
Universal Containers is implementing a community of High-Volume Community users. Community users should be able to see records associated to their Account or Contact record. The Architect is planning to use a Sharing Set to provide access to the records. When setting up the Sharing Set, certain objects are not available in the list of Available Objects. Which two reasons explain why an object is excluded from the list of Available Objects in a Sharing Set?
- A. The custom object does not have a lookup to Accounts or Contacts.
- B. The object's Organization-Wide sharing setting is set to Public Read/Write.
- C. The object is a custom object, and therefore not available for a sharing set.
- D. The object's Organization-Wide sharing setting is set to Private.
Answer: A,B
NEW QUESTION # 15
Universal Containers has Controlled by Parent sharing settings on the Contact object and Public Read Only sharing settings on Account, Opportunity, and Case objects. Which two options can the user see while adding Account team members to the Account?
- A. Contact Access
- B. Case Access
- C. Activity Access
- D. Opportunity Access
Answer: B,D
NEW QUESTION # 16
Mary is Joe's manager in the Role Hierarchy. The organization-wide default for a custom Invoice object is Public Read-Only, and Mary's profile is not granted the Read permission for the Invoice object.
Which action can Mary take on Joe's invoice records?
- A. Read/Write
- B. View Only
- C. None
Answer: C
NEW QUESTION # 17
What should the Architect do to ensure Field-Level Security is enforced on a custom Visualforce page using the Standard Lead Controller?
- A. Use the {!Schema.sObjectType.Lead.fields.isAccessible()} expression
- B. Use the "With Sharing" keyword on the Standard Lead Controller.
- C. Nothing; Field-Level Security will automatically be enforced.
- D. Use the Schema.SObject.Lead.isAccessible() method.
Answer: C
Explanation:
<apex:outputText value="{!contactName}" rendered="{!$ObjectType.Contact.fields.Name.Accessible}" />
NEW QUESTION # 18
The architect at Universal Containers is trying to ensure that security vulnerabilities are not present within the Salesforce organization.
What two tests should the architect verify?
Choose 2 answers
- A. Test Cross-Site Scripting on custom pages.
- B. Test for SOQL Injection.
- C. Test for invalid user access attempts.
- D. Test Cross-Site Scripting on Apex queries.
Answer: A,B
Explanation:
Explanation
Cross-Site Scripting (XSS) and SOQL Injection are two common types of security vulnerabilities that can affect Salesforce applications. XSS occurs when malicious code is injected into a web page that can execute in the browser of a user who visits that page6. SOQL Injection occurs when user input is used to construct a SOQL query without proper validation or escaping, which can allow an attacker to manipulate the query and access unauthorized data7. To prevent XSS, developers should use appropriate encoding methods when displaying user input on custom pages8. To prevent SOQL Injection, developers should use bind variables or the escapeSingleQuotes() method when building SOQL queries with user input9. Option A is incorrect, since Apex queries are not vulnerable to XSS. Option D is incorrect, since testing for invalid user access attempts is not related to security vulnerabilities within the Salesforce organization.
NEW QUESTION # 19
Universal Containers (UC) has a custom Apex class that enforces a business process and updates opportunities. UC has noticed that fields with Field-Level Security permission of Read-Only on certain users' profiles are being updated by this class.
How should the architect fix this problem?
- A. Add the With Sharing keyword to the class.
- B. Put the code in an inner class that uses the With Sharing keyword.
- C. Use the IsUpdateable() Apex method to test each field prior to allowing update.
Answer: C
Explanation:
In Apex, the IsUpdateable() method of the Schema.DescribeFieldResult class checks if the current user has permission to update a specific field. Using this method ensures that the Apex class respects Field-Level Security (FLS) for all profiles, avoiding unauthorized updates.
* Option A: Adding the "With Sharing" keyword enforces record-sharing rules but does not enforce field- level security.
* Option B: Placing the code in an inner class with "With Sharing" does not address the field-level security issue.
* Option C (Correct): Using IsUpdateable() ensures field permissions are honored programmatically, preventing updates to read-only fields.
:
Schema.DescribeFieldResult Methods
Enforcing Field-Level Security in Apex
NEW QUESTION # 20
A custom invoice object has been created with a master-detail relationship to account. The Accountreceivable (AR)teamneedsaccesstoInvoicesARusersdonotownnorhaveaccess to Accountrecords.AccountOWD is set to Private.The AR team isunable to find Invoices in Listviews,Reports,norinGlobalSearch.The Architecthasbeenasked tohelp troubleshoot. Whatcouldbethe issue preventing ARteam members from seeinginvoices?
- A. TheARteamprofileneedstobeassignedanInvoicePagelayout.
- B. A sharing rule is missing to share Invoices to the AR team.
- C. The Accounts receivable profile doesnothave read Permission to the Invoice Object.
- D. Asharingruleismissingto shareAccountstotheARteam.
Answer: D
NEW QUESTION # 21
In order to comply with Regulatory Requirements, Universal Containers must store sensitive customer information on-premise. Universal Containers would like this on-premise information to be accessible from Salesforce. What technology can Universal Containers use to achieve this?
- A. Implement a third-party proxy server.
- B. Implement an on-premise database.
- C. Implement the Salesforce Shield toolkit.
- D. Implement a third-party tokenization service.
Answer: A
NEW QUESTION # 22
Universal Containers (UC) has 600 sales reps. UC has rollout plan to deploy salesforce in 3 weeks. At the end of the second week, they received a "User Role Limit Exceeded" error.
After investigation, they discovered that during the user provisioning process, a new role was generated for every new user.
Which two recommendations could solve this problem?
Choose 2 answers.
- A. Review the user provisioning process to not automatically create a user role for any new user.
- B. Create an Apex class to replace the User Roles by generic one as soon as they are created.
- C. Contact salesforce support and request to increase the number of users' roles allowed.
- D. Remove role hierarchy from salesforce org and control the record access using apex managed sharing.
Answer: A,C
NEW QUESTION # 23
Universal Containers (UC) requested that branch managers and UC branch staff should only see customers and related information in their geographic location.
Which options should be used together to achieve the requirements?
- A. Create the Account Team and add branch manager team members, and configure organization-wide defaults of the Account object.
- B. Configure Role Hierarchy and create sharing rules.
- C. Configure organization-wide defaults of the Account object and create sharing rules.
Answer: C
Explanation:
Explanation
Configuring organization-wide defaults of the Account object and creating sharing rules are two options that should be used together to achieve the requirements, as they allow admins to set the baseline level of access for accounts and then grant additional access based on criteria such as geographic location2. Creating the Account Team and adding branch manager team members will not work, as it will require manual maintenance and will not grant access to UC branch staff. Configuring Role Hierarchy will not work, as it will grant access based on the user's position in the organization, not their geographic location
NEW QUESTION # 24
Universal Containers has enabled External Default Sharing and wants to allow for external users to have the External Sharing Default set to Public Read-Only for a custom object. Which two options are valid Internal Default sharing settings for the custom object?
- A. Private
- B. Public Read/Write
- C. Public Read Only
- D. Controlled by Parent
Answer: B,C
Explanation:
Explanation
The Internal Default sharing settings for a custom object can be either Public Read/Write or Public Read Only if the External Default sharing setting is set to Public Read Only1. Controlled by Parent and Private are not valid options because they would not allow external users to access the custom object records.
NEW QUESTION # 25
The Architect notices that there are many duplicate Account records and numerous sharing rules created in Salesforce. What would be the reason?
- A. The Object permissions for the Account object are Create, Read, and Edit.
- B. The Organization-Wide Default for the Account object is Public Read-Only.
- C. The Organization-Wide Default for the Account object is Private.
- D. The Organization-Wide Default for the Account object is Public Read/Write.
Answer: C
Explanation:
Explanation
The reason why there are many duplicate Account records and numerous sharing rules created in Salesforce is that the Organization-Wide Default for the Account object is Private4. This means that users can only see their own accounts and those shared with them explicitly by sharing rules or other means. This could lead to users creating duplicate accounts without knowing that they already exist in Salesforce. If the Organization-Wide Default for the Account object is Public Read/Write or Public Read Only, users would be able to see all accounts in Salesforce and avoid creating duplicates. The Object permissions for the Account object are not relevant for this question.
NEW QUESTION # 26
The Collections department at Universal Containers uses Salesforce to track its efforts. All Invoices and Invoice Line Items are stored in Salesforce. Invoice Line Item object details, such as Quantity and Extended Amount, should be summarized at the Invoice Object level, and all users who can see a given invoice should always see all invoice line items. Without leveraging Apex code, how should an Architect create the relationship between the Invoice object and the Invoice Line Item Object?
- A. The Invoice object should have a Master-Detail to the Invoice Line Item Object
- B. The Invoice Object should have an inner joint to the Invoice Line Item Object
- C. The Invoice Line Item Object should have a Master-Detail to the Invoice Object
- D. The Invoice Line Item Object should have a Lookup to the Invoice Object
Answer: C
NEW QUESTION # 27
A user at Universal Containers would like to give access to a Report folder to someone else in the organization.
Which two access permissions should the user have to support this requirement?
Choose 2 answers.
- A. The "Editor" Report folder permission.
- B. The "Manager" Report folder permission.
- C. The "Manage Reports in Public Folders" Profile permission.
- D. The "Viewer" Report folder permission
Answer: B,C
Explanation:
Explanation
To give access to a report folder to someone else in the organization, the user needs to have the "Manage Reports in Public Folders" profile permission and the "Manager" report folder permission. The "Viewer" and
"Editor" report folder permissions only allow the user to view or edit the reports in the folder, but not to share the folder with others
NEW QUESTION # 28
Universal Containers has a custom object to maintain Job information with a private sharing model. The Delivery group is distributed through the Role Hierarchy based on geography. As the Delivery group often collaborates on Jobs, all users in the Delivery profile required View access to all Job records. In special case, the Delivery user who owns a job must be able to grant a Product Development user access to a Job record.
Which two platform features can be used to support these requirements?
Choose 2 answers
- A. Owner-based Sharing Rules
- B. Manual Sharing
- C. Criteria-based Sharing Rules
- D. "View All" Profile settings
Answer: B,D
Explanation:
Explanation
Two platform features that can be used to support the requirements for granting access to Job records are
"View All" profile settings and manual sharing. The "View All" profile setting can be enabled for the Delivery profile to grant them View access to all Job records regardless of ownership or role hierarchy. The manual sharing feature can be used by the Delivery user who owns a job to grant access to a Product Development user on a case-by-case basis
NEW QUESTION # 29
Universal Containers has expanded to sell virtual containers for data storage. Virtual container work orders are provisioned immediately by the system and therefore cannot be changed by a sales representative. What is an optimal approach to implement these requirements?
- A. Implement a sharing rule that changes access for all Work Order to Read.
- B. Remove the edit button from the work order page layout.
- C. Remove the Work Order Edit permission from the sales representative Profile.
- D. Change the record type/page layout assignment for Work Order to be Read Only.
Answer: C
Explanation:
Explanation
Removing the Work Order Edit permission from the sales representative profile is the optimal approach to implement these requirements, as it will prevent sales representatives from changing virtual container work orders that are provisioned immediately by the system. Option B is incorrect, since removing the edit button from the work order page layout would not prevent sales representatives from editing work orders using other methods, such as inline editing or data loader. Option C is incorrect, since changing the record type/page layout assignment for Work Order to be Read Only would not affect the edit permission, but only the layout configuration. Option D is incorrect, since implementing a sharing rule that changes access for all Work Order to Read would not prevent sales representatives from editing work orders that they own.
NEW QUESTION # 30
Universal Containers (UC) is looking to expand its delivery capabilities through a network of distributors that use a Partner Community license. UC employees currently can view all delivery records through the organization-wide default (OWD) setting of Public Read-Only.
Which approach should an architect recommend to limit the records a distributor can see?
- A. Create a criteria-based sharing rule to grant access to the distributor.
- B. Set the External OWD to Private for the Delivery object.
- C. Create an ownership-based sharing rule to grant access to the distributor.
Answer: B
NEW QUESTION # 31
Universal Containers uses Person Accounts to represent retail customers and Business Accounts to represent commercial customers. The retail sales team should not have access to commercial customers but should have access to ALL retail customers.
With the organization-wide default on Account set to Private, how should the architect meet these requirements?
- A. Create an owner-based sharing rule on AccountContactRelation to grant access to all account contact roles records owned by retail sales reps.
- B. Create 2 criteria-based sharing rule giving the Retail Sales role access to Accounts of type PersonAccount.
- C. Update the Retail Sales profile to grant access to Person Account record type.
Answer: B
Explanation:
To restrict access to only Person Accounts for the retail sales team while maintaining a private OWD:
* Option A (Correct): Create criteria-based sharing rules. These rules can be defined to share accounts of type PersonAccount with users in the Retail Sales role. This ensures they can only access retail customers (Person Accounts) and not Business Accounts.
* Option B: Sharing on AccountContactRelation does not provide direct access to accounts and is irrelevant to this requirement.
* Option C: Updating the profile to grant access to the Person Account record type does not align with the private OWD and does not manage access to records individually.
:
Criteria-Based Sharing Rules
NEW QUESTION # 32
Sales manager want their team members to help each other close Opportunities. The Opportunity and .. private. To grant Opportunity access to sales reps on the same team, ownership-based sharing rules ..
What is the side effect of this approach?
- A. All sales reps will have Read access to all Accounts.
- B. Sales reps on the same will have Read access to the Accounts for Opportunities owned by their.
- C. Sales Reps on the same team will have Edit access to the Accounts for Opportunity owned by their.
- D. All sales reps will have Read access to Accounts for all Opportunities.
Answer: A
NEW QUESTION # 33
......
Last Sharing-and-Visibility-Architect practice test reviews: Practice Test Salesforce dumps: https://www.getvalidtest.com/Sharing-and-Visibility-Architect-exam.html
Try Sharing-and-Visibility-Architect Free Now! Real Exam Question Answers: https://drive.google.com/open?id=1WpfZhvT6sfmPRpgOM3OlpUBLb7A_eCuq