SF-Admin Configuration and Setup — 25 Questions

Question 1

A system administrator needs to restrict access so that users can only see records owned by them or their subordinates. Which sharing setting should be configured?

Accepted Answer

Set OWD to Private. To restrict record access to owners and subordinates, the Organization-Wide Defaults (OWD) must be set to Private. Once OWD is set to Private, the Role Hierarchy automatically grants access to records owned by subordinates to users higher in the hierarchy. This is a foundational concept in Salesforce security, ensuring that users only view data relevant to their specific role level and hierarchical authority within the company structure.

Answer

Set OWD to Public Read Only

Answer

Enable Grant Access Using Hierarchies

Answer

Create a Permission Set for view access

Question 2

An administrator is configuring a custom object and needs to ensure that users have the correct access. Which TWO settings must be verified to ensure a user can view a specific field on a record?

Accepted Answer

Object-level Read permission. Field-level security and object-level permissions work in tandem to control data access. Even if a user has access to the record via sharing rules, they must have read access at the object level (via Profile/Permission Set) and visibility at the field level. Without both, the field will either be hidden or the user will lack the necessary permission to query the record entirely.

Answer

Organization-Wide Defaults

Answer

Sharing Rules

Answer

Record Type configuration

Question 3

Which Salesforce feature allows users to access a specific set of records based on a shared value in a field?

Accepted Answer

List Views. List Views allow users to filter, sort, and view records based on specific criteria. They are highly customizable and can be shared with specific groups or the entire organization. By creating a List View, users can quickly isolate relevant data, such as 'All Open Leads' or 'High Value Accounts,' significantly increasing productivity by reducing the time spent searching for data.

Answer

Sharing Rules

Answer

Record Types

Answer

Reports

Question 4

An administrator is setting up a new custom object. Which THREE items can be customized for this object?

Accepted Answer

Search Layouts. Custom objects in Salesforce are highly flexible, allowing administrators to tailor them to specific business requirements. Customization includes user interface elements, security controls, and logic. Mastering these customization points is crucial for an administrator to build efficient, user-friendly solutions that align perfectly with business workflows and data requirements, ensuring high user adoption and data accuracy.

Answer

Profile Names

Answer

Org-Wide Defaults

Question 5

An administrator needs to track changes to a specific field. Where should this be enabled?

Accepted Answer

On the Object's definition page. Field History Tracking is the standard Salesforce tool for monitoring changes to specific fields. By enabling it on the object and selecting the desired fields, Salesforce creates an audit record every time the value changes. This is vital for data integrity and auditing, allowing administrators to see exactly what values were changed, by whom, and when, providing complete accountability for data modifications.

Answer

In the Setup Audit Trail

Answer

In the Field's metadata settings

Answer

In the Profile settings

Question 6

A system administrator needs to ensure that users can only access Salesforce from the company's office network range. Which feature should the administrator configure?

Accepted Answer

Login IP Ranges on the Profile. Login IP Ranges are the primary mechanism for restricting access to Salesforce based on network boundaries. By defining these ranges on a specific Profile, administrators effectively block unauthorized access attempts from external locations. This is a critical security configuration for organizations handling sensitive data that require strict perimeter control to mitigate the risks associated with credential theft or unauthorized remote access.

Answer

Organization-Wide Defaults

Answer

Trusted IP Ranges in Network Access

Answer

Role Hierarchy restrictions

Question 7

A user receives the exhibit error when attempting to edit a custom field on a record. The user has Read access to the object. What is the most likely cause?

Accepted Answer

Field-Level Security is set to Read-Only.. The error indicates a lack of Field-Level Security or object permissions. In Salesforce, even if a user has access to a record, they require 'Edit' permission on the object and 'Visible/Read-Write' access to the specific field via their Profile or Permission Set. Identifying these bottlenecks is essential for maintaining the principle of least privilege while ensuring that operational workflows are not disrupted by restrictive configuration settings.

Answer

The user is not the owner of the record.

Answer

The record is currently locked by an Approval Process.

Answer

The user has a lower role in the hierarchy.

Question 8

Which user interface setting allows an administrator to define related lists and field layouts for mobile users?

Accepted Answer

Compact Layouts. Compact Layouts are the primary tool for optimizing the mobile experience in Salesforce. By defining which fields appear in the highlights panel, administrators ensure that mobile users see essential information at a glance without scrolling through long lists. This configuration is critical for field personnel who rely on rapid access to key data points while working away from their desks, directly impacting their productivity.

Answer

Page Layouts

Answer

Lightning App Builder

Answer

Mobile Publisher

Question 9

Which TWO of the following are valid reasons to use a custom Record Type?

Accepted Answer

To display different page layouts for different user groups.. Record Types are essential for managing different business processes and user experiences within a single object. By allowing different picklist values and page layouts, they enable organizations to support diverse workflows without creating separate objects. Understanding when to use them is fundamental for streamlining system navigation and ensuring users only interact with the data relevant to their current business function, which increases adoption and data accuracy.

Answer

To filter picklist values based on the user's role.

Answer

To automatically change the owner of the record.

Answer

To change the standard object's API name.

Question 10

A company requires that users perform a mandatory survey before an Opportunity can be set to 'Closed Won'. Which feature should the administrator use?

Accepted Answer

Validation Rule. Validation rules are the standard way to enforce data requirements based on the state of a record. By ensuring that specific fields are populated only when a stage reaches 'Closed Won', the administrator maintains data quality without disrupting the earlier stages of the sales process. This technique is essential for reporting and ensuring that downstream business processes have the necessary information to proceed efficiently once an opportunity is successfully closed.

Answer

Workflow Rule

Answer

Assignment Rule

Answer

Approval Process

Question 11

An administrator is cleaning up the organization and wants to identify inactive users. Which THREE options are true about freezing vs. deactivating a user?

Accepted Answer

Freezing a user allows them to retain their license.. Freezing a user is a temporary measure that prevents login, while deactivation is a permanent step that frees up the Salesforce license. Understanding the difference is vital for license management and security, as deactivated users cannot own records or be added to queues. This ensures that the organization maintains accurate user records and optimizes license utilization, which directly impacts the company's subscription costs and overall system security posture.

Answer

Frozen users can be removed from public groups.

Answer

Freezing a user removes them from the role hierarchy.

Question 12

A sales manager reports that some users are unable to see the 'New' button on the Opportunity related list on Account records. What should the administrator check first to troubleshoot this access issue?

Accepted Answer

The Object permissions for the Opportunity object in the user's profile.. To troubleshoot button visibility on related lists, the administrator must verify the user's Profile or Permission Set permissions on the child object. Even if a user has access to the parent Account, the Opportunity object requires specific CRUD permissions. Additionally, the Page Layout must be checked to ensure the button is enabled in the Related List properties, which is a common configuration oversight in Salesforce environments.

Answer

The Sharing Settings for the Account object.

Answer

The Organization-Wide Defaults for the Opportunity object.

Answer

The Search Layout configuration for the Account object.

Question 13

Which TWO options are valid ways to define the layout of a Lightning record page? (Choose two)

Accepted Answer

Using Lightning App Builder to customize regions and components.. Lightning record pages are flexible, dynamic interfaces that replace traditional page layouts for Lightning Experience. They are configured using the Lightning App Builder, which allows for drag-and-drop component placement. Additionally, Dynamic Forms offer a way to control field visibility based on criteria directly within the App Builder, providing a more granular and customized user experience without needing multiple page layouts for different profiles.

Answer

Modifying the Page Layout editor to add fields to the page.

Answer

Configuring the Compact Layout for header fields.

Answer

Adjusting the Search Layout settings.

Question 14

An administrator is setting up a new custom object. Which TWO actions must be taken to ensure the object is available to end users?

Accepted Answer

Add the object to a Lightning App. Custom objects require two distinct setup steps to become functional for end users. First, the object must have a tab created so it appears in the navigation menu. Second, permissions must be granted via profiles or permission sets to allow users to access the data. Without both, the object remains isolated in the backend, effectively invisible and inaccessible to the people who need it for their daily tasks.

Answer

Enable Chatter tracking

Answer

Create a standard Page Layout

Answer

Add the object to the Global Search

Question 15

An administrator at Northern Trail Outfitters needs to ensure that a custom field called 'Renewal_Date__c' on the Opportunity object is automatically populated with a date that is 30 days after the Close Date when an opportunity is closed won. The field should not be editable by users. What is the most efficient way to achieve this?

Accepted Answer

Create a record-triggered flow that updates the field when the opportunity stage is Closed Won.. A record-triggered flow is the most efficient declarative tool to automatically set a field based on a stage change. It can evaluate the condition and perform the date calculation without code. The field can be set as read-only on the page layout to prevent user edits. This approach aligns with Salesforce's current best practices for automation.

Answer

Use a workflow rule with a field update to set the Renewal_Date__c field.

Answer

Create a validation rule that requires the field to be filled when the stage is Closed Won.

Answer

Create a formula field that calculates Close Date + 30.

Question 16

Universal Containers has a custom object Project__c with a master-detail relationship to Account. The administrator needs to ensure that when a Project__c record is created, the Account's Billing City is automatically populated into the Project's Location__c field. The administrator also wants to ensure that users cannot manually change the Location__c field after it is populated. Which two actions should the administrator take? (Choose two.)

Accepted Answer

Set the Location__c field to read-only on the Project__c page layout.. To automatically populate Location__c from the related Account's Billing City, a record-triggered flow that runs before save is appropriate. To prevent manual changes, making the field read-only on the page layout is a straightforward UI-level control. Together, these meet the requirements without overcomplicating the solution.

Answer

Use a workflow rule with a field update to set Location__c from Account.BillingCity.

Answer

Create a formula field on Project__c that references Account.BillingCity.

Answer

Create a validation rule that prevents users from editing Location__c if it is not blank.

Question 17

Universal Containers has a complex sales process where opportunity stages must be restricted based on the user's role. The administrator needs to ensure that only users with the 'Sales Manager' role can move an opportunity to the 'Closed Won' stage, while all other sales users can only move opportunities up to 'Negotiation/Review'. Which two Salesforce configuration features should the administrator use to enforce this requirement? (Choose two.)

Accepted Answer

Create a validation rule on the Opportunity object that checks the user's role and the stage value.. A validation rule that checks both the stage value and the user's role is the correct enforcement mechanism. It blocks unauthorized users from saving an opportunity as Closed Won while allowing all other stage changes. Field-level security, page layouts, and permission sets control access or visibility, not conditional value restrictions, so they cannot satisfy the requirement.

Answer

Assign a permission set that removes the 'Modify All' permission on opportunities for non-Sales Manager users.

Answer

Configure field-level security on the Stage field to make it read-only for non-Sales Manager profiles.

Answer

Use a record type and page layout combination to hide the Closed Won stage from non-Sales Manager users.

Question 18

Cloud Kicks has a requirement that the 'Support' profile should not be able to view the 'Social Security Number' field on the Contact object. The administrator has already created the field. What is the most appropriate way to hide this field from users with the Support profile?

Accepted Answer

Set the field-level security for the Support profile to 'Hidden'.. Field-level security is the correct mechanism to control whether a user can view or edit a field. Setting it to 'Hidden' for the Support profile ensures that users with that profile cannot see the field anywhere. Page layout changes only affect the UI and do not restrict API or report access.

Answer

Create a validation rule that prevents Support users from viewing the field.

Answer

Set the field-level security for the Support profile to 'Read-Only' or 'Hidden'.

Answer

Remove the field from the Contact page layout assigned to the Support profile.

Question 19

A Salesforce administrator at Cloud Kicks needs to grant a new employee access to Salesforce. The employee requires the ability to view and edit all Opportunities, but should not be able to delete any. The administrator assigns the user a profile that already has 'Read' and 'Edit' access to Opportunities. Which two additional configurations are required to meet these requirements? (Choose two.)

Accepted Answer

Ensure the profile does not have 'Delete' access on Opportunities.. The user needs read and edit on all Opportunities but no delete. The profile already grants read and edit, but record-level access must be extended via a sharing rule to allow editing all records. Additionally, the profile must not grant Delete permission, as object permissions are additive. These two configurations ensure the user can edit all Opportunities without deletion rights.

Answer

Assign a permission set that grants 'Read' and 'Edit' on Opportunities.

Answer

Assign a permission set that grants 'Modify All' on Opportunities.

Answer

Set the organization-wide default for Opportunities to 'Public Read Only'.

Question 20

Which Salesforce tool should an administrator use to view a history of all configuration changes made in the environment?

Accepted Answer

Setup Audit Trail. The Setup Audit Trail tracks the recent setup changes that you and other administrators have made to your organization. This is a critical tool for troubleshooting, auditing, and maintaining compliance. It logs details like who made the change, when it occurred, and what specifically was modified, providing a clear timeline of administrative activity within the Salesforce org.

Answer

Debug Log

Answer

Login History

Answer

Field History Tracking