Sample Questions and Answers
What should be used to grant visibility to a subset of records based on a user’s custom field value?
Apex-managed sharing logic based on user attributes
B. Public groups
C. Profiles
D. OWD
Answer: A. Apex-managed sharing logic based on user attributes
Explanation: Allows highly dynamic, fine-grained access control.
What is the best practice when configuring default sharing for a new object with confidential data?
OWD set to Private
B. OWD set to Public
C. Enable external sharing only
D. Create a report folder
Answer: A. OWD set to Private
Explanation: Ensures access is explicitly granted.
How do delegated admins affect sharing?
They can manage users and certain settings, but cannot override sharing
B. They bypass record-level access
C. They override OWD
D. They have full access to all records
Answer: A. They can manage users and certain settings, but cannot override sharing
Explanation: Delegated admins cannot access records unless explicitly shared.
Which object type supports “manual sharing” out of the box?
Standard and Custom objects with OWD = Private or Read-Only
B. Reports
C. Dashboards
D. Tasks
Answer: A. Standard and Custom objects with OWD = Private or Read-Only
Explanation: Manual sharing only applies when access is restricted.
How can you track changes in access to a specific record?
Use Field Audit Trail and Setup Audit Trail
B. Enable Workflow
C. Use Process Builder
D. Export with Data Loader
Answer: A. Use Field Audit Trail and Setup Audit Trail
Explanation: Field Audit Trail tracks changes in configuration and access.
What tool helps simulate sharing behavior in development environments?
System.runAs() in Apex Test classes
B. Public Groups
C. Profiles
D. Custom Metadata
Answer: A. System.runAs() in Apex Test classes
Explanation: Simulates user access context in tests.
Why should high-volume parent-child relationships be designed with caution?
Because cascading sharing recalculations can degrade performance
B. It causes data corruption
C. Lookup fields can’t be indexed
D. No sharing applies
Answer: A. Because cascading sharing recalculations can degrade performance
Explanation: Too many children under a single parent triggers recalculations.
How can you identify user access paths in a highly customized org?
Use the “Why can’t I access this record?” tool or Salesforce Sharing button
B. Review their role only
C. Reset the password
D. Clone profiles
Answer: A. Use the “Why can’t I access this record?” tool or Salesforce Sharing button
Explanation: Helps determine which rule grants access.
What is the main benefit of Apex Managed Sharing over declarative sharing?
Programmatic control of record visibility
B. Easy to configure
C. No code needed
D. Doesn’t require testing
Answer: A. Programmatic control of record visibility
Explanation: Suitable for custom and dynamic scenarios.
What object does Apex Managed Sharing use to create sharing entries?
[ObjectName]__Share object
B. [ObjectName]__c
C. UserAccess
D. FieldPermissions
Answer: A. [ObjectName]__Share object
Explanation: Used to define share settings via Apex.
How does user impersonation affect sharing in API usage?
Sharing is enforced based on the impersonated user’s context
B. It’s always admin-level
C. It disables roles
D. It gives read-only access
Answer: A. Sharing is enforced based on the impersonated user’s context
Explanation: All access checks are based on the impersonated user.
What is required for external users to gain record access via criteria-based sharing?
Matching the criteria for the sharing rule
B. Having Admin profile
C. Using standard objects only
D. Being internal
Answer: A. Matching the criteria for the sharing rule
Explanation: Access is granted if the rule conditions are met.
What is a risk of hardcoding user IDs in sharing logic?
Code becomes brittle and not portable
B. It improves performance
C. It’s required for sharing
D. It boosts automation
Answer: A. Code becomes brittle and not portable
Explanation: Always use dynamic user references or Custom Settings.
What can be used to visualize the impact of data skew?
Debug logs, Setup Audit Trail, and Sharing Recalculation queue
B. Report filters
C. Dashboard folders
D. Apex settings
Answer: A. Debug logs, Setup Audit Trail, and Sharing Recalculation queue
Explanation: These tools help identify slowdowns and skew.
What is one advantage of using Custom Metadata for access rules?
Easily configurable in production without code
B. Requires frequent deployments
C. Forces reindexing
D. Only works with external users
Answer: A. Easily configurable in production without code
Explanation: Great for dynamic and admin-managed rules.
What’s a best practice for managing community user access to multiple records?
Use sharing sets or Apex sharing rules
B. Use permission sets only
C. Enable guest browsing
D. Flatten all record hierarchies
Answer: A. Use sharing sets or Apex sharing rules
Explanation: Tailors access based on account or user criteria.
What Salesforce feature allows linking external data without storage?
Salesforce Connect (External Objects)
B. Lookup filters
C. Data Export
D. ETL Tools
Answer: A. Salesforce Connect (External Objects)
Explanation: External Objects don’t use local storage.
Which record access strategy scales best for B2B Community models?
Role hierarchy + Account-based sharing
B. Public Read/Write
C. Workflow Rules
D. Custom Metadata
Answer: A. Role hierarchy + Account-based sharing
Explanation: Provides clean separation by account.
What happens if OWD is set to Public Read/Write on an object?
All users can view and edit all records on that object
B. All fields become editable
C. Roles are removed
D. Sharing rules are disabled
Answer: A. All users can view and edit all records on that object
Explanation: Overrides most sharing logic.
How does a sharing set differ from a sharing rule?
Sharing sets are for communities and map access based on user-to-record relationships
B. Sharing sets work for internal users only
C. Sharing rules can’t be edited
D. They are identical
Answer: A. Sharing sets are for communities and map access based on user-to-record relationships
Explanation: Used in community-based sharing.
What does without sharing do in Apex?
Disables sharing enforcement
B. Enables profiles
C. Shares with everyone
D. Logs sharing
Answer: A. Disables sharing enforcement
Explanation: Gives full access regardless of user sharing.
What can be used to review detailed sharing access per record?
Record Access Reason Tool
B. Apex test logs
C. Chatter
D. Custom Fields
Answer: A. Record Access Reason Tool
Explanation: Helps debug access issues.
What makes record-level access scalable in a large community?
Public groups + criteria-based sharing
B. Assigning everyone to Admin
C. Global OWD
D. No role hierarchy
Answer: A. Public groups + criteria-based sharing
Explanation: Reduces admin overhead.
Which setting should be disabled to prevent role-based access on custom objects?
“Grant Access Using Hierarchies”
B. Apex sharing
C. Manual sharing
D. Field-level security
Answer: A. “Grant Access Using Hierarchies”
Explanation: This prevents automatic inheritance via roles.
How can Custom Permissions help with sharing?
They control visibility logic in Apex
B. They change profiles
C. They replace field-level security
D. They override OWD
Answer: A. They control visibility logic in Apex
Explanation: Used for toggling access rules programmatically.
What causes recalculation delay after sharing rule updates?
Volume of affected records
B. Dashboard limits
C. Field updates
D. App name
Answer: A. Volume of affected records
Explanation: More records = longer job queue.
What does sharing re-evaluation after update depend on?
Whether a field used in rule condition is changed
B. Record name
C. Last login
D. Related object creation
Answer: A. Whether a field used in rule condition is changed
Explanation: Triggers recalculation only when criteria changes.
What’s the preferred way to control access to an external data source?
Named Credentials and External Object Permissions
B. Public sharing
C. Hardcoded credentials
D. Formula field
Answer: A. Named Credentials and External Object Permissions
Explanation: Secure and maintainable.
What object tracks manual share entries?
Object__Share
B. ManualShareAudit
C. ShareHistory
D. UserPermission
Answer: A. Object__Share
Explanation: Manual shares create a record in the share table.
Which API can manipulate record sharing declaratively?
Metadata API and Tooling API
B. Streaming API
C. Bulk API only
D. Reports API
Answer: A. Metadata API and Tooling API
Explanation: Allows external tools to manage sharing setup.
Reviews
There are no reviews yet.