Free Practice Questions for the Salesforce Architect Exams Plat-Arch-205 Exam (2026 Updated)

View All Users is the narrowly scoped system permission intended for users who must see every User record regardless of the User object ' s sharing restrictions. That makes it appropriate for an identity and access audit because the team can review user configuration without receiving broad visibility to unrelated business data. View All Data is far more powerful: it bypasses record-level restrictions across the organization and would violate least privilege when the requirement is limited to User setup. The User object also has specialized visibility and sharing semantics, so simply thinking in terms of a generic object-level Read permission does not address the need to bypass restrictive User sharing. The preferred architecture is to grant View All Users through a dedicated permission set assigned only to the identity and access auditors, then remove it when no longer required. Study Guide reference: Access to Other Data - User record sharing, View All Users, identity administration, system permissions, and least privilege.

Dynamic Forms is the declarative solution for adapting record presentation without replacing the standard Salesforce page with custom Visualforce or Lightning code. It allows administrators to place fields and field sections individually on a Lightning record page and apply visibility rules based on record context or supported device conditions. That is a better fit for form-factor and alignment problems than maintaining custom view-action overrides that detect devices and route users to different layouts. The declarative approach reduces code ownership, regression risk, testing effort, and long-term maintenance while preserving the standard Salesforce record experience. Where the requirement is driven by record type, the same mechanism can show different field sections for different business processes. The architect must still remember that Dynamic Forms controls presentation rather than security: fields that are hidden by component visibility can still be available through reports, list views, APIs, or other interfaces if Field-Level Security grants access. Sensitive information therefore still requires proper FLS. Study Guide reference: Implications of Security Model Choice - Dynamic Forms, Lightning App Builder, component visibility, record types, device form factors, maintainability, and UI visibility versus security.

Price Books have specialized organization-wide access levels. Use is the appropriate level when sales agents must not only view products and pricing but also select the Price Book and add its products to Opportunities. View Only supports inspection and reporting but does not represent the same ability to transact with the Price Book during the sales process. Salesforce therefore distinguishes Use, View Only, and No Access so organizations can separate catalog visibility from sales usability. If UC later needs to restrict specialized Price Books, it can establish a more restrictive baseline and explicitly share those Price Books with selected users, roles, or groups at the Use level. The Price Book security model must also be combined with normal Product, Opportunity, and object permissions because each layer controls a different part of the process. Study Guide reference: Access to Other Data - Price Book security, Use access, View Only, product pricing, and Opportunity product access.

The users can open the Invoice record, which proves that object and record access are already sufficient to reach the record. The fact that only a small set of system fields is visible while the administrator sees the full detail strongly indicates a Field-Level Security difference. If the Sales Users profile lacks visibility to the remaining fields, Salesforce suppresses those fields even though the page layout contains them. A page layout marked Read-Only would still display the fields; it would only prevent editing. A role-based sharing rule also cannot grant field visibility because sharing rules operate at the record level. The correct troubleshooting path is therefore to review the Invoice object ' s field permissions for the affected profile and any assigned permission sets, using Field Accessibility where useful to understand the effective result. The scenario reinforces that object permission, record sharing, and Field-Level Security are separate controls and must be diagnosed independently. Study Guide reference: Permissions to Standard Objects, Custom Objects, and Fields - Field-Level Security, field accessibility, profiles, permission sets, and separation of field security from record sharing.

Mary has no effective access because object-level Read permission is a prerequisite for every record-level access mechanism. Public Read-Only OWD and the role hierarchy can determine which Invoice records a user may see only after the user is authorized to read the Invoice object itself. Mary ' s profile does not grant that permission, so neither the public OWD nor her position above Joe can make Joe ' s Invoice records available. Record sharing never substitutes for object CRUD. This is a core Salesforce security-order concept: object permissions establish whether a user can use an object, Field-Level Security determines which fields are available, and OWD, hierarchy, sharing rules, teams, and manual sharing determine which records are visible. Granting Read through a profile or permission set would be required before Public Read-Only or hierarchy-derived access could take effect. Study Guide reference: Permissions to Standard Objects, Custom Objects, and Fields - object CRUD, profiles, permission sets, OWD interaction, role hierarchy, and layered security evaluation.

Custom Apex that serves a Lightning component must not assume that the client-side component has already enforced the user ' s data access. Apex can execute in system context, so the development team must explicitly preserve record visibility and enforce the user ' s CRUD and Field-Level Security where appropriate. The record-level requirement can be handled with the correct sharing declaration or user-mode operations, while object and field authorization can be enforced through user mode, Security.stripInaccessible(), or valid Schema Describe checks. Creating runAs tests is valuable for verification but does not secure production execution. Likewise, method names such as isShareable are not valid substitutes for the platform ' s real security APIs. The architectural principle is to treat the LWC-to-Apex boundary as a server-side trust boundary: every Apex entry point should return only records and fields that the running user is entitled to access. Study Guide reference: Permissions to Standard Objects, Custom Objects, and Fields - system-mode Apex, record-sharing enforcement, CRUD/FLS, user-mode operations, and Lightning/Apex security boundaries.

When a sharing rule grants Opportunity access to members of a public group, the effective audience can also include managers above those group members through the role hierarchy. Salesforce can propagate access upward according to the group ' s Grant Access Using Hierarchies behavior and the object ' s normal hierarchy semantics. That is why the sales engineers in the public group and their managers can have access to the shared Opportunities. The reverse is not true: subordinates of a manager do not inherit records merely because the manager or another subordinate has access, and peer users in comparable roles do not automatically receive one another ' s shared records. Architects must account for this upward propagation when designing public groups for sensitive records because the effective audience may be broader than the explicit list of group members. Study Guide reference: Access to Records - Public Groups, sharing rules, Grant Access Using Hierarchies, upward access inheritance, and Private Opportunity OWD.

Public Read-Only gives John baseline Read access to every Account, but it does not let him edit Paul ' s Account. When Paul manually grants John Edit access, Salesforce adds an explicit AccountShare entry representing that exceptional access. The new share has a Manual row cause and a Read/Write access level; it does not transfer ownership and it does not convert the existing OWD-derived access into an owner share. Salesforce evaluates all applicable access mechanisms and gives the user the highest effective access, so the explicit manual share raises John ' s effective access on that record from Read Only to Read/Write. The design illustrates the additive nature of Salesforce record security: OWD establishes the baseline and explicit shares can open a specific record further. Ownership remains with Paul, and the manual share should be used only where a deliberate exception to the baseline is required. Study Guide reference: Access to Records - manual sharing, AccountShare, RowCause, OWD, additive record access, and effective access calculation.

The finance analyst receives parent implicit access to the Account because she has been granted access to the related Opportunity. Salesforce provides Read Only access to the parent Account when a user has legitimate access to certain standard child records such as Opportunities, Cases, or Contacts. This lets the user understand the customer context of a record the user is authorized to work with. The same rule does not mean that Opportunity access automatically grants visibility to every Contact associated with that Account; Contact access depends on the organization ' s Contact sharing configuration and other applicable access mechanisms. The role hierarchy is also not the cause described here, because the new visibility appears specifically after the Opportunity was shared to the analyst. The scenario is testing standard implicit sharing rather than a deliberately configured sharing rule. Study Guide reference: Access to Records - implicit sharing, parent implicit access, Opportunity-to-Account relationships, standard-object sharing behavior, and Private OWD.

The requirement cuts horizontally across a role hierarchy that is intentionally organized by country, so the solution belongs in the sharing-rule layer rather than in a redesign of the hierarchy. A sharing rule can open the relevant Accounts to sales managers in other countries without collapsing distinct regional roles. Among the supplied choices, the owner-based sharing-rule option represents the correct architectural family. If the business condition is literally based on an Account Segment field, a criteria-based sharing rule would be the more precise Salesforce mechanism because criteria-based rules select records by field values whereas owner-based rules select records by the owner ' s role or group. A permission set cannot grant access to selected Account records, and a public group contains users rather than Account records. Putting U.S. and Canadian managers in the same role would not cause peers to inherit one another ' s records and would distort the hierarchy ' s organizational meaning. Study Guide reference: Access to Records - cross-hierarchy sharing, owner-based versus criteria-based rules, roles, public groups, and record-level access.

External organization-wide defaults are designed for this exact separation of internal and external access. UC can keep the internal default for ServiceFeedback at the level required by employees while setting Default External Access to Private for authenticated external users. That creates a restrictive baseline for partner users without reducing internal visibility. Sharing rules are additive: they can open access beyond the organization-wide default, but they cannot take away access already granted by a public OWD. For that reason, neither an owner-based nor a criteria-based rule can be used to make external access more restrictive. After the external OWD is Private, UC can selectively grant the required records through the appropriate Experience Cloud mechanism, such as sharing sets, partner roles, sharing rules, or other supported sharing constructs depending on the relationship model. This follows the least-privilege design principle used throughout Salesforce security architecture: establish the most restrictive baseline that satisfies the broad population, then add narrowly scoped exceptions. Study Guide reference: Access to Records - organization-wide defaults, external OWDs, Experience Cloud record access, sharing rules, and least-privilege sharing.

Salesforce Content Deliveries are designed to distribute files externally through generated links and include an option to require a password before the recipient can access the content. That directly satisfies the CISO ' s requirement without adding a third-party product or building an Experience Cloud site solely for file delivery. A content delivery can provide a controlled external URL while the password is communicated separately to the customer. Administrators can also establish organization-level policies for content-delivery password behavior so the security requirement is applied consistently. An Experience Cloud site would introduce identity, licensing, and site-management overhead that is unnecessary when the business simply needs to send a protected file link. The architect should still consider the sensitivity of the content, expiration requirements, and broader information-governance policy when deciding whether content delivery is appropriate for a particular file. Study Guide reference: Access to Other Data - Salesforce Files, Content Deliveries, external file access, password protection, and secure content distribution.

The enforceable control is the Order Delete object permission. Removing the Delete button from a page layout removes only one user-interface path and does not guarantee that the user cannot delete through another supported interface or API. Likewise, making a page layout read-only controls presentation and field editing but does not revoke the underlying delete capability. UC should remove Delete permission for Order from the affected profiles and permission sets and verify that no permission set group or elevated permission grants it back, because Salesforce permissions are additive. The organization should also review powerful overrides such as Modify All Records or Modify All Data for users who are subject to the legal-retention requirement. If the business needs a formal legal hold, additional retention, backup, audit, and governance controls may be appropriate, but within the supplied choices the correct authorization layer is object CRUD. Study Guide reference: Permissions to Standard Objects, Custom Objects, and Fields - object CRUD, Delete permission, permission aggregation, page-layout limitations, and least privilege.

The relevant Experience Cloud capability is Super User access, which gives selected external users broader visibility to records belonging to other users associated with the same external account. For Customer Community Plus, the modern terminology commonly used is Portal Super User; the answer choice uses the broader or legacy Partner Super User wording, but it represents the same architectural concept being tested. Delegated external-user administration focuses on managing external users rather than granting broad same-account Case visibility, and a generic community-administration permission is not the record-sharing mechanism required. Super User access should be assigned only to carefully selected agents because it materially expands what they can see within the distributor account. The organization ' s external OWD can remain restrictive between distributors while the elevated user receives the intended same-account visibility. Study Guide reference: Access to Records - Customer Community Plus, Super User access, same-account Case visibility, external-user administration, and Experience Cloud least privilege.

The branch requirement combines vertical management access with geographic isolation. The role hierarchy should model the branch reporting structure so branch managers inherit the records available to branch staff, while sharing rules provide controlled exceptions or horizontal access where the hierarchy alone does not express the complete requirement. This is preferable to using Account Teams record by record because the need is systematic across an entire geographic branch, not ad hoc collaboration on selected Accounts. The organization-wide default should remain restrictive enough to prevent cross-branch visibility, but among the supplied choices the combination of Role Hierarchy and sharing rules is the architecture that models both management and regional sharing requirements. The security model should be tested for users in neighboring branches to confirm that no unintended access is introduced. Study Guide reference: Access to Records - Role Hierarchy, geographic access models, sharing rules, Private baseline, branch management, and least-privilege record visibility.

Field-Level Security is the appropriate control because the requirement concerns whether a user may see a sensitive field anywhere in Salesforce, not merely whether the field appears on one page layout. If the VIP Flag is hidden through FLS for non-authorized users, Salesforce can suppress that field across record pages, reports, list views, search results, APIs, and other interfaces according to the user ' s effective permissions. Removing the field from a page layout is only a presentation change and is not a reliable security boundary; a user who retains FLS could still reach the value through another surface. Record types likewise select business processes and page layouts but do not provide authoritative field confidentiality. The architect should therefore grant field visibility only to the Private Banking population, preferably through the organization ' s chosen profile/permission-set strategy, and keep the field hidden from everyone else. This follows the principle that sensitive information must be protected at the data-access layer rather than by cosmetic UI configuration. Study Guide reference: Permissions to Standard Objects, Custom Objects, and Fields - Field-Level Security, page layouts, record types, profiles, permission sets, and protection of sensitive fields.

The requirement is limited to one object and requires universal visibility without edit access, so the least-privilege solution is a permission set that grants View All Records for Opportunity. View All Records bypasses record-sharing restrictions for that object only. View All Data is much broader because it bypasses sharing across essentially all objects, which would conflict with UC ' s privacy principle and expose more information than the reporting team needs. A permission set is preferable to changing a broad profile when only a few users require the elevation because it can be assigned and removed independently. View All Records does not itself grant edit permission; object CRUD and Field-Level Security still control what users can change and which fields they can access. This preserves the rest of the security model while ensuring the reporting team can see every Opportunity. Study Guide reference: Permissions to Standard Objects, Custom Objects, and Fields - View All Records, View All Data, permission sets, sharing overrides, and least privilege.

Price Books use specialized access semantics rather than the same generic sharing pattern as ordinary business objects. The High Risk Price Book should be the authorization boundary for the sensitive product catalog. UC can maintain broad View Only access where users need to inspect pricing while explicitly sharing the High Risk Price Book with trained staff at the level required to use it during the Opportunity sales process. Users need appropriate Price Book use access to select that Price Book and add its products to an Opportunity. This approach keeps the high-risk product entitlement centralized in the pricing catalog instead of trying to enforce it through page layouts, validation rules, or a broad Opportunity permission. Standard sharing rules are not the normal way to express this Price Book access model, and a solution that grants the entitlement to all sales users would violate the requirement. The architecture should pair the specialized Price Book access with normal Opportunity and Product permissions so only the trained population can transact with the restricted products. Study Guide reference: Access to Other Data - Price Book security, View Only, Use access, product visibility, pricing governance, and least-privilege sales access.

A criteria-based sharing rule combined with a public group precisely matches the requirement. The records are selected by a business characteristic - whether an Opportunity is high value - while the recipients are a cross-functional set of auditors who do not belong to one common role. The public group provides a stable audience that can be maintained independently, and the criteria-based rule automatically exposes only the Opportunities that meet the defined condition. Placing the auditors at the top of the role hierarchy would grant much broader access and distort the hierarchy ' s organizational purpose. Default Opportunity Teams are tied to deal collaboration and individual owners, so they are not an appropriate enterprise audit mechanism. Starting from a Private OWD and opening only the qualifying records to the auditor group preserves least privilege. Study Guide reference: Access to Records - criteria-based sharing, public groups, Private OWD, cross-functional audit access, and least privilege.

Large changes to roles, ownership, OWD, and sharing rules can force Salesforce to recalculate very large numbers of sharing rows. In an organization with a complex hierarchy spanning many regions and countries, that recalculation can become a major operational event. Parallel sharing recalculation is the relevant capability because Salesforce can process eligible portions of the sharing recalculation workload concurrently instead of treating the entire job as one serial operation. Divisions are primarily a data-partitioning and reporting feature; they do not optimize access recalculation. Skinny tables are database-query performance structures and likewise do not address the sharing model. The architect should also recognize that Account sharing changes can cascade into related Contacts, Opportunities, and Cases through implicit sharing relationships, increasing the scale of the work. Major hierarchy and ownership reorganizations therefore require planned maintenance, monitoring of background sharing jobs, and a design that limits unnecessary complexity in the role and group model. Study Guide reference: Implications of Security Model Choice - enterprise-scale sharing, hierarchy changes, ownership realignment, parallel recalculation, and sharing performance.

The custom Apex layer is responsible for enforcing Salesforce security; the Lightning component does not automatically make server-side data access safe. The valid runtime control among the choices is the Apex security mechanism that checks or enforces the user ' s access before data is returned or changed. Field-Level Security must be respected for sensitive values such as Shipment Amount, and the record-sharing model must also be enforced so a Private OWD is not bypassed. Schema Describe checks such as isAccessible(), isCreateable(), and isUpdateable() can be used for explicit field and object permission checks. Current secure-Apex patterns also include user-mode database operations and Security.stripInaccessible(), which can enforce or sanitize CRUD/FLS more comprehensively. Record visibility is a separate layer and should be preserved with the appropriate sharing context. System.runAs() is a testing facility, not a production authorization mechanism, and isShareable is not a valid Apex security keyword. Study Guide reference: Permissions to Standard Objects, Custom Objects, and Fields - secure Apex, CRUD/FLS, record-sharing enforcement, user-mode operations, and Lightning/Apex security boundaries.

The valid runtime mechanism among the choices is declaring the Apex class with sharing so Salesforce evaluates record-level sharing when the class queries Shipment records. Because the Shipment OWD is Private, Apex that ignores sharing can expose records outside the user ' s intended visibility. The sensitive Shipment Amount introduces a second security layer: with sharing does not enforce object CRUD or Field-Level Security. The implementation must separately enforce field access, for example with user-mode operations, Security.stripInaccessible(), or valid Schema Describe checks. System.runAs() is useful for tests but does not secure production execution, and isShareable is not a valid Apex sharing keyword. The correct architecture therefore combines record-sharing enforcement with explicit CRUD/FLS enforcement instead of assuming one mechanism protects every layer. Study Guide reference: Permissions to Standard Objects, Custom Objects, and Fields - with sharing, Apex execution context, CRUD/FLS, user-mode operations, and secure Lightning/Apex architecture. The implementation should also be validated with representative users so effective permissions, sharing inheritance, and any cross-object access behave exactly as designed before production release.