Salesforce Updated Sharing-and-Visibility-Architect Exam Questions and Answers by husna

The feature in Salesforce that is needed to restrict access to a custom object that has public read/write access is profile. Profile settings can control the create, read, edit, and delete permissions for a custom object at the user level, regardless of the organization-wide default settings. The other options are either not related to object access or not restrictive enough.

The system permission in their profile that enabled the users to see all list views is manage public list views. This permission allows users to create, edit, and delete public list views, as well as view all list views shared with them or with their groups. To restrict visibility to the respective list views, the system administrator should remove this permission from the users’ profiles and assign it only to those who need to manage public list views

Apex runs in system mode, which means it does not respect the current user’s permissions and sharing settings. Therefore, the development team needs to enforce record visibility by using the WITH SECURITY_ENFORCED clause or the Security.stripInaccessible method

Implementing a third-party proxy server is the best technology to achieve the requirement of accessing on-premise information from Salesforce. A proxy server acts as an intermediary between Salesforce and the on-premise database, and it can handle authentication, encryption, and data transformation. Option A is incorrect, as tokenization is a technique to replace sensitive data with tokens, not to access on-premise data. Option B is incorrect, as it does not specify how Salesforce can connect to the on-premise database. Option D is incorrect, as Salesforce Shield is a set of tools to enhance data security and compliance in Salesforce, not to access external data sources.