Free Salesforce Certified Platform Sharing and Visibility Architect Exam Practice Questions

Sample Practice Questions

Try these 10 sample questions from the Salesforce Certified Platform Sharing and Visibility Architect Exam practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1An analyst must create, read, and update Inspection records that are shared with her, but must never delete them. Which object permission combination meets this requirement?

   1. A. Read and Edit, without Create or Delete
   2. B. Create and Read, without Edit or Delete
   3. C. Create, Read, and Edit, without Delete
   4. D. Create, Read, Edit, and Delete

   Answer: C

   Explanation: Salesforce states, "You can control whether users can create, read, edit, or delete any records of that object." Granting Create, Read, and Edit supports the three required operations while withholding Delete prevents the prohibited operation.

   Reference: Control Access to Objects — Manage Object Permissions

2. 2For a custom object with independent ownership, ordinary users must initially see only their own records and records granted through approved sharing paths. They must not receive baseline access to peers’ records. Which organization-wide default should be selected?

   1. A. Private
   2. B. Public Read Only
   3. C. Public Read/Write
   4. D. Controlled by Parent

   Answer: A

   Explanation: The unit defines, "Private: Only the record owner, and users above that role in the hierarchy, can view, edit, and report on those records." Private supplies the restrictive baseline, after which approved sharing features can add access. The question specifies independent ownership, excluding parent-controlled sharing.

   Reference: Control Access to Records — Organization-Wide Sharing Defaults — Private

3. 3A user receives access to a report folder but still sees only the records available under her existing data permissions when running a report. Which explanation correctly separates the two security layers?

   1. A. Folder access also grants read access to all reported records
   2. B. Folder access replaces field-level security only inside reports
   3. C. Folder access exposes the report artifact without granting all underlying data
   4. D. Folder access makes reports display data using the folder owner’s record permissions

   Answer: C

   Explanation: The unit states, "If you give a user access to a folder, they have access to the reports or dashboards in that folder. But that doesn’t mean they get to see all the data." Report-artifact access and underlying data access remain separate.

   Reference: Learn About Reports and Dashboards — Who Can Access Reports and Dashboards?

4. 4A large org frequently switches an object’s organization-wide default between restrictive settings during business realignments. Which scalability implication must the architect account for?

   1. A. Existing-record access is recomputed only during viewing, so no sharing recalculation runs
   2. B. The switches require sharing recalculation that can take substantial processing time
   3. C. Existing-record access changes only when each record’s owner is subsequently changed
   4. D. Only newly created records receive the changed default; existing records are never recalculated

   Answer: B

   Explanation: The guide states, "However, these changes require sharing recalculation and depending on volume could result in long processing times." Organization-wide-default changes are therefore access-model changes with potential recalculation cost, not merely interface changes.

   Reference: Platform Sharing Architecture — Organization-Wide Defaults

5. 5A user owns a custom-object record. Her effective object permissions include Create and Read but exclude Edit and Delete. She must be able to edit that record while continuing to have no Delete permission. Which additional grant meets the requirement?

   1. A. Grant Edit on the object
   2. B. Grant Create on the object again
   3. C. Grant Delete on the object
   4. D. Grant access through an owner-based sharing rule

   Answer: A

   Explanation: The architecture guide explains, "However, the owner won’t be able to edit or delete the record." Ownership does not supply missing object operations. Granting Edit enables the required change while continuing to withhold Delete. Granting Delete would violate the explicit no-Delete requirement; more record sharing cannot replace object Edit.

   Reference: Platform Sharing Architecture — Record Ownership and Queues

6. 6Project records have independent ownership and their own organization-wide default. All internal users with object Read permission must view every Project record. Ordinary users with object Edit permission should not edit peers’ records unless another sharing path grants access. Which baseline meets both requirements?

   1. A. Use Private as the baseline and grant no general read access
   2. B. Use Public Read/Write as the baseline without selective edit grants
   3. C. Use Controlled by Parent as the baseline for the independently owned records
   4. D. Use Public Read Only as the baseline and grant additional edits selectively

   Answer: D

   Explanation: The unit states, "Public Read Only: All users can view and report on records, but only the owner, and users above that role in the hierarchy, can edit them." This provides broad reading without baseline peer editing; separately granted access can allow specified editors.

   Reference: Control Access to Records — Organization-Wide Sharing Defaults — Public Read Only

7. 7With enhanced folder sharing, a report custodian must control which users can access a particular folder. Required report permissions are handled separately. Which folder-access plan directly grants this responsibility?

   1. A. Grant Manager access to the folder
   2. B. Grant Editor access to the folder
   3. C. Grant Viewer access to the folder
   4. D. Grant Run Reports without changing folder access

   Answer: A

   Explanation: The help page states, "Viewers can see the data. Editors can determine what data is shown. Managers can control access." Manager is the folder role that addresses the stated access-management responsibility.

   Reference: Access Levels for Report and Dashboard Folders — Overview — access levels

8. 8A proposed public-group structure uses many deeply nested groups. Which conceptual performance concern should the architect raise when reviewing this design?

   1. A. Deep nesting eliminates the need to recalculate group membership
   2. B. Deep nesting affects record queries but has no group-maintenance impact
   3. C. Group nesting can increase membership-calculation and maintenance work
   4. D. Each added nesting level reduces the work of calculating indirect membership

   Answer: C

   Explanation: The guide states, "Nesting has an impact on group maintenance and performance due to group membership calculation." Reviewing and limiting unnecessary nesting is therefore relevant to scalability. The question does not require predicting a runtime or calculating a dataset impact.

   Reference: Platform Sharing Architecture — Public Groups — nesting considerations

9. 9A team needs a reusable access package for a finite task, such as maintaining leads. The package must be assignable alongside other task packages without replacing users’ profiles. What should the architect configure?

   1. A. A separate profile for each task
   2. B. A role for each permission package
   3. C. An organization-wide default for the task
   4. D. A permission set containing the task permissions

   Answer: D

   Explanation: The unit states, "We recommend that you organize your permission sets by including all the permissions required for a finite task, such as working with leads." It also states, "Users can be assigned multiple permission sets." This directly meets the reusable, additive task-package requirement.

   Reference: Control Access to Objects — Manage Object Permissions — Permission sets

10. 10Every internal employee with the necessary object permissions must be able to read and edit every independently owned reference record. No per-record exceptions are needed. Which organization-wide default directly supplies that record-level baseline?

    1. A. Set Private and rely only on owners’ role-hierarchy inheritance
    2. B. Set Public Read/Write for the independently owned reference object
    3. C. Set Public Read Only and add no further record-edit grants
    4. D. Set Private and grant all internal users a read-only sharing rule

    Answer: B

    Explanation: The unit defines, "Public Read/Write: All users can view, edit, and report on all records." With the required object permissions already given, this is the direct record-level baseline for universal reading and editing.

    Reference: Control Access to Records — Organization-Wide Sharing Defaults — Public Read/Write