Salesforce Certified Integration Architect

Sample Questions and Answers

What is the Salesforce recommended way to handle large file transfers in integration?
A. Attach as base64 in API
B. Email the files
✅ C. Use ContentVersion and REST API multipart upload
D. Upload via SOAP API only
Explanation: Using ContentVersion and REST API supports large file uploads efficiently.

What is the maximum size of a REST API response payload?
A. 1 MB
B. 5 MB
✅ C. 6 MB
D. 10 MB
Explanation: Salesforce REST API response size limit is 6 MB.

How can you ensure API calls respect user permissions?
A. Run as System Administrator
B. Disable security
✅ C. Run API calls in user context enforcing CRUD and FLS
D. Use guest user
Explanation: API calls respect user profile permissions and field-level security.

How does Salesforce support OAuth refresh tokens?
A. Does not support refresh tokens
✅ B. Supports refresh tokens to maintain long-lived sessions
C. Uses password only
D. Uses API keys only
Explanation: OAuth refresh tokens allow applications to maintain sessions without user intervention.

What is the primary function of Salesforce Connect?
A. Load bulk data into Salesforce
B. Create custom Apex REST services
✅ C. Access external data in real-time without storing it in Salesforce
D. Automate workflow processes
Explanation: Salesforce Connect allows integration with external systems via external objects, displaying data without storing it locally.

Which Salesforce API is best suited for uploading large volumes of data asynchronously?
A. REST API
B. SOAP API
✅ C. Bulk API
D. Streaming API
Explanation: Bulk API is designed to process large volumes of data asynchronously in batches.

Which authentication protocol is recommended for securing API integrations with Salesforce?
A. Basic Authentication
✅ B. OAuth 2.0
C. API Key
D. Session ID only
Explanation: OAuth 2.0 is the industry standard for secure delegated access to APIs.

How can you expose Salesforce data to external systems securely without writing code?
A. Using Apex REST services
B. Creating Visualforce pages
✅ C. Using Outbound Messaging and Workflow Rules
D. Using API keys
Explanation: Outbound Messaging sends SOAP messages automatically when triggered by workflow rules.

What is the purpose of the Connected App in Salesforce?
A. To customize page layouts
B. To create reports
✅ C. To manage OAuth settings and API access for external apps
D. To schedule batch jobs
Explanation: Connected Apps configure OAuth, permissions, and security settings for integrations.

How can you optimize integration performance for REST API calls?
A. Use multiple small calls instead of bulk calls
B. Use only SOAP API
✅ C. Use Composite API to batch multiple requests
D. Use synchronous Apex callouts for all integrations
Explanation: Composite API minimizes round trips by bundling multiple REST calls.

What Salesforce feature allows asynchronous processing of inbound data?
A. Apex Triggers
✅ B. Platform Events
C. Workflow Rules
D. Visual Workflow
Explanation: Platform Events enable event-driven asynchronous processing.

Which tool helps track detailed API usage and errors in Salesforce?
A. Setup Audit Trail
B. Data Loader logs
✅ C. Event Monitoring and API Usage logs
D. Visualforce debug logs
Explanation: Event Monitoring provides detailed tracking of API calls and errors.

What is the maximum batch size for Bulk API v2?
A. 200 records
✅ B. 10,000 records
C. 50,000 records
D. 1 million records
Explanation: Bulk API v2 supports batch sizes up to 10,000 records per batch.

Which Salesforce object stores OAuth tokens for integrations?
A. User object
B. Session object
✅ C. Auth Provider and Named Credential
D. Connected App object
Explanation: Named Credentials store OAuth tokens securely, linked to Auth Providers.

How can you enforce IP restrictions on API access?
A. Disable API access
B. Use password policies
✅ C. Configure Login IP Ranges on Profiles and Connected Apps
D. Limit user licenses
Explanation: Login IP Ranges restrict API access to trusted networks.

Which API type is best suited for metadata deployment?
A. REST API
B. Bulk API
✅ C. Metadata API
D. Streaming API
Explanation: Metadata API is designed for managing metadata components.

What Salesforce feature allows automatic retry of failed outbound messages?
A. Workflow Rules
✅ B. Outbound Messaging with built-in retry logic
C. Apex triggers
D. Platform Events
Explanation: Outbound Messaging retries failed messages up to 24 hours.

How can you monitor Platform Event delivery success?
A. Use debug logs
B. Check Visualforce pages
✅ C. Use Event Monitoring and Subscriber Monitoring
D. No monitoring possible
Explanation: Salesforce provides monitoring tools for Platform Event delivery and subscribers.

Which integration pattern is best for high-volume data migration?
A. Remote Process Invocation
✅ B. Batch Data Synchronization
C. Event-Driven Architecture
D. UI Integration
Explanation: Batch Data Synchronization supports processing large volumes efficiently.

How does Salesforce ensure data security in integrations?
A. Data is always public
B. No encryption for API data
✅ C. Enforces field-level security, CRUD, and uses encrypted transport
D. Data is encrypted only on mobile devices
Explanation: Salesforce enforces security through permissions and encrypted HTTPS connections.

Which Salesforce integration approach supports event-driven architecture?
A. Batch Apex
B. REST API
✅ C. Platform Events and Change Data Capture
D. Visualforce Remoting
Explanation: Platform Events and CDC support event-driven integrations.

What is a key benefit of using Named Credentials?
A. Hardcoding credentials in code
✅ B. Centralizing endpoint and authentication configuration
C. Bypassing security checks
D. Allowing anonymous API access
Explanation: Named Credentials simplify maintenance and secure authentication management.

Which Salesforce tool helps simulate API calls for testing?
A. Workbench
B. Data Loader
✅ C. Postman with Salesforce REST API
D. Salesforce DX only
Explanation: Postman can send and simulate API calls for integration testing.

How can Salesforce integrate with external message queues?
A. Using Outbound Messaging only
B. Using Visualforce pages
✅ C. Using Platform Events and Middleware
D. Not supported
Explanation: Middleware can bridge Platform Events to message queues.

What is the limit of daily API requests for most Salesforce editions?
A. 1,000
B. 50,000
✅ C. 15,000 per license multiplied by number of user licenses
D. Unlimited
Explanation: API request limits depend on licenses and edition.

How can you limit data exposure in API responses?
A. Return all fields always
B. Disable API access
✅ C. Use field-level security and selective queries
D. Use only SOAP API
Explanation: FLS controls which fields are exposed via APIs.

Which tool allows metadata deployment in Salesforce CI/CD pipelines?
A. Salesforce DX CLI
B. Data Loader
✅ C. Metadata API and Salesforce CLI
D. Workbench only
Explanation: Salesforce DX and Metadata API support automated deployments.

How do you handle API versioning in Salesforce?
A. Use latest version only
B. Disable older versions
✅ C. Specify API version in calls and maintain backward compatibility
D. API versioning not supported
Explanation: Salesforce APIs support versioning to maintain compatibility.

What is the recommended way to handle errors in Apex callouts?
A. Ignore exceptions
B. Use try-catch blocks and log errors
✅ C. Use try-catch with logging and retries as needed
D. Abort transaction silently
Explanation: Proper error handling ensures robust integrations.

How do you limit the size of API responses?
A. Use LIMIT clause in SOQL
✅ B. Use selective SOQL queries and pagination
C. Use Metadata API only
D. No way to limit response size
Explanation: Pagination and selective fields reduce response size.

What Salesforce feature allows declarative API integrations without coding?
A. Apex triggers
B. Visualforce
✅ C. External Services
D. Custom REST endpoints
Explanation: External Services enable declarative integration using schemas.

How is data consistency maintained in asynchronous integrations?
A. No consistency guarantees
B. Use only synchronous calls
✅ C. Use idempotent operations and compensating transactions
D. Ignore duplicates
Explanation: Idempotency ensures consistency despite retries.

Which Salesforce API supports querying data using SOQL?
A. Metadata API
B. Bulk API
✅ C. REST API and SOAP API
D. Streaming API
Explanation: REST and SOAP APIs support SOQL queries.

How can you automate authentication token refresh in Salesforce integrations?
A. Manual refresh only
✅ B. Use OAuth refresh token flow
C. Reauthenticate every hour
D. Use static tokens
Explanation: OAuth refresh tokens allow automatic renewal without user intervention.

What is the primary purpose of Salesforce External Objects?
A. Store large volumes of data inside Salesforce
B. Create custom objects for internal use
✅ C. Access and display data stored outside Salesforce in real time
D. Replace standard Salesforce objects
Explanation: External Objects allow Salesforce to display external data without storing it internally.

Which Salesforce feature helps to securely store and manage external system credentials?
A. Custom Settings
✅ B. Named Credentials
C. Custom Metadata Types
D. Permission Sets
Explanation: Named Credentials store authentication details securely and simplify callouts.

When integrating Salesforce with legacy systems, which pattern is often recommended?
A. Remote Process Invocation – Request and Reply
✅ B. Batch Data Synchronization
C. UI Integration
D. Event-Driven Architecture
Explanation: Legacy systems often require batch processing due to performance and architecture.

What is the recommended best practice for handling large data volumes in Salesforce integrations?
A. Use synchronous REST calls only
B. Use SOAP API with small batch sizes
✅ C. Use Bulk API and asynchronous processing
D. Avoid using APIs
Explanation: Bulk API supports efficient processing of large datasets asynchronously.

Which Salesforce tool provides real-time streaming of platform events?
A. Data Loader
B. Workflow Rules
✅ C. CometD Bayeux protocol client
D. REST API
Explanation: CometD protocol clients subscribe to platform events in real time.

How do you ensure API integration follows least privilege principle?
A. Grant all permissions to integration user
✅ B. Limit API user permissions to only required objects and fields
C. Use admin profile for integration users
D. Use Guest user profile
Explanation: Limiting permissions reduces security risks.

What is a key difference between SOAP and REST APIs in Salesforce?
A. SOAP uses JSON; REST uses XML
✅ B. SOAP uses XML; REST supports JSON and XML
C. SOAP is asynchronous only
D. REST requires WSDL files
Explanation: SOAP strictly uses XML; REST supports JSON and XML formats.

How can Salesforce integrations handle API rate limits?
A. Ignore rate limits
B. Use only Bulk API
✅ C. Implement exponential backoff and retry logic
D. Increase user licenses
Explanation: Backoff and retries help avoid hitting rate limits and manage throttling.

What is the use of Change Data Capture (CDC) in Salesforce?
A. Bulk data upload tool
✅ B. To capture and stream record changes for integrations
C. Data encryption method
D. Metadata deployment tool
Explanation: CDC allows external systems to subscribe to data changes in real time.

Which Salesforce feature enables declarative integration with external REST services?
A. Apex Callouts
✅ B. External Services
C. Outbound Messaging
D. Visual Workflow
Explanation: External Services allow no-code integration using OpenAPI specifications.

Which of the following is NOT a supported OAuth 2.0 flow in Salesforce?
A. Authorization Code Grant
B. JWT Bearer Token Flow
✅ C. Client Credentials Grant (unsupported by Salesforce)
D. Refresh Token Flow
Explanation: Salesforce does not support client credentials OAuth flow.

How can you improve integration scalability for inbound API calls?
A. Use synchronous calls only
B. Disable Apex limits
✅ C. Use asynchronous Apex and queueable jobs
D. Increase API user licenses
Explanation: Asynchronous processing offloads heavy operations and improves scalability.

What is a Named Credential’s key benefit when making callouts?
A. Avoids need to manage authentication in Apex code
B. Hardcodes credentials for easy access
✅ C. Centralizes endpoint and authentication details securely
D. Requires manual token management
Explanation: Named Credentials simplify secure callouts by storing credentials.

What Salesforce API is optimized for real-time notifications of record changes?
A. Bulk API
B. REST API
✅ C. Streaming API and Change Data Capture
D. Metadata API
Explanation: Streaming API and CDC provide push notifications for data changes.

When integrating Salesforce with an external ERP, which pattern ensures data consistency?
A. Remote Process Invocation – Fire and Forget
B. UI Integration
✅ C. Batch Data Synchronization with reconciliation
D. Outbound Messaging only
Explanation: Batch synchronization with reconciliation maintains data accuracy.

Which tool can be used to test Salesforce REST APIs interactively?
A. Data Loader
B. Salesforce CLI
✅ C. Postman
D. Workbench only
Explanation: Postman is a popular tool for testing RESTful services.

How does Salesforce handle versioning for REST APIs?
A. No versioning supported
B. All APIs are backward incompatible
✅ C. Version specified in the API endpoint URL (e.g., /v52.0/)
D. Version set via Connected App only
Explanation: REST API endpoints include version numbers for compatibility.

What’s the maximum number of records returned in a single REST API query response?
A. 10
B. 1000
✅ C. 2000
D. 5000
Explanation: The REST API returns up to 2000 records per response; use pagination for more.

Which Salesforce feature helps control outbound message delivery order?
A. Workflow Rule Settings
✅ B. Platform Event Replay IDs
C. Approval Processes
D. Named Credentials
Explanation: Replay IDs in Platform Events maintain delivery order.

How can you secure sensitive data in Salesforce integrations?
A. Encrypt all data in Apex code
B. Use Visualforce pages only
✅ C. Use Shield Platform Encryption and field-level security
D. Disable APIs
Explanation: Shield Encryption and FLS protect sensitive data access.

Which mechanism ensures external systems can authenticate with Salesforce without storing user passwords?
A. Basic Authentication
B. Password Authentication
✅ C. OAuth 2.0 with refresh tokens
D. API Key authentication
Explanation: OAuth 2.0 allows token-based secure authentication without password storage.

What is the role of the Salesforce Connected App in OAuth flows?
A. Provides UI customization
B. Controls user permissions
✅ C. Defines OAuth client ID, scopes, and policies
D. Schedules batch jobs
Explanation: Connected Apps define OAuth clients and manage security policies.

How can you achieve data synchronization between Salesforce and an external database in near real-time?
A. Use daily batch jobs only
✅ B. Use Change Data Capture events and middleware
C. Use Workflow Rules only
D. Use only manual export/import
Explanation: CDC with middleware supports near real-time sync.

Which API would you use for metadata deployment in CI/CD?
A. REST API
B. Bulk API
✅ C. Metadata API
D. Streaming API
Explanation: Metadata API manages Salesforce metadata for deployments.

What Salesforce limits should be considered when designing API integrations?
A. Only user license limits
B. No limits exist
✅ C. API request limits, governor limits, and concurrent callouts
D. Only storage limits
Explanation: Design integrations with awareness of Salesforce API and governor limits.

What is the recommended way to call an external REST service from Apex?
A. Use Database methods
✅ B. Use HttpRequest and Http classes with Named Credentials
C. Use Visualforce remoting
D. Use Workflow Rules
Explanation: Apex HttpRequest classes with Named Credentials secure callouts.

How does Salesforce support error handling in asynchronous callouts?
A. No error handling available
B. Only synchronous callouts support errors
✅ C. Use try-catch, Queueable Apex, and logging mechanisms
D. Errors are ignored
Explanation: Asynchronous Apex supports error handling via try-catch and logging.

What tool can automate Salesforce metadata deployments?
A. Workbench only
✅ B. Salesforce CLI with Metadata API
C. Data Loader only
D. Developer Console
Explanation: Salesforce CLI supports automated deployments in CI/CD pipelines.

Which is NOT a feature of Salesforce Platform Events?
A. Event-driven architecture support
B. Asynchronous processing
✅ C. Guaranteed order of event delivery across all subscribers
D. Integration with external systems
Explanation: Event delivery order is guaranteed per subscriber, but not across all.

Which Salesforce feature can be used to call external SOAP services declaratively?
A. External Services
✅ B. Apex Callouts with WSDL-generated classes
C. Outbound Messaging
D. Visual Workflow only
Explanation: Apex callouts support SOAP integration using generated classes from WSDL.