SALESFORCE-PD1 Hard Questions — 25 Difficult Questions

Question 1

A developer writes an Apex method that executes a SOQL query inside a for-loop over a list of 200 Account records. Which governor limit is most likely to be immediately breached?

Accepted Answer

Total number of SOQL queries issued. The synchronous limit for SOQL queries is 100 per transaction. Querying inside a loop over 200 records will exceed this limit.

Answer

Total heap size allocation

Answer

Maximum CPU time on Salesforce servers

Answer

Total number of records retrieved by SOQL queries

Question 2

A developer writes an Apex method that executes a SOQL query using user-supplied search parameters. How can the developer protect against SOQL injection vulnerabilities?

Accepted Answer

Use bind variables in the SOQL query instead of string concatenation.. Using bind variables in SOQL queries automatically sanitizes the input and prevents SOQL injection, unlike string concatenation.

Answer

Execute the query using Database.queryWithBinds() with a restricted access modifier.

Answer

Use String.escapeSingleQuotes() on all user inputs before concatenating into the query string.

Answer

Enclose all dynamic parameters in single quotes within the dynamic SOQL query string.

Question 3

Which THREE tools or contexts can be used to execute Anonymous Apex code? Choose 3 options.

Accepted Answer

Salesforce CLI (sf apex run). Anonymous Apex can be executed via the Developer Console, Salesforce Extensions for VS Code, and Salesforce CLI (sf apex run).

Answer

Standard Page Layout Editor

Answer

Lightning App Builder

Question 4

An application has a requirement to query records owned by subordinate users in the role hierarchy using Apex. Which SOQL feature supports this capability?

Accepted Answer

Executing queries in 'with sharing' context where sharing rules grant access via role hierarchy. The WITH DATA CATEGORY or parent user hierarchy queries can be accomplished using standard sharing, but for role hierarchy expansions in SOQL, developers use keyword qualifiers or UserRecordAccess. Wait, standard SOQL does not have a direct 'ROLE HIERARCHY' keyword, but SOSL/SOQL supports user permission checks, or specifically, sharing rules are evaluated automatically in 'with sharing' classes. However, querying subordinate data is managed by sharing rules and record ownership.

Answer

SELECT Hierarchy FROM User

Answer

USING SCOPE subordinate

Answer

WITH ROLE HIERARCHY

Question 5

A developer needs to iterate over a map of Account IDs to Account sObjects and perform processing on each value. Which loop construct is valid Apex?

Accepted Answer

for(Account acc : myMap.values()) { ... }. Iterating over map values is done using map.values() in a for-loop: for(Account acc : myMap.values()).

Answer

for(KeyValue kv : myMap.entrySet()) { ... }

Answer

for(Account acc : myMap) { ... }

Answer

for(Id id : myMap.iterator()) { ... }

Question 6

A developer is writing code that processes untrusted data and wants to automatically strip fields and relationships that the current user cannot access, without throwing an exception. Which feature should be used?

Accepted Answer

Security.stripInaccessible(). The Security.stripInaccessible() method strips fields and SObjects that the user lacks permission to read or create/update, avoiding runtime security exceptions.

Answer

Database.insert(records, AccessType.ENFORCE_ACCESSIBLE)

Answer

Approval.lock()

Answer

Schema.sObjectType.fields.isAccessible()

Question 7

Which THREE techniques help prevent hitting governor limits when writing SOQL queries in Apex? Choose 3 answers.

Accepted Answer

Filtering queries using indexed fields (such as Id, Name, or external IDs) where possible.. Best practices include querying into collections, using bind variables, and filtering with indexed fields.

Answer

Omitting LIMIT clauses on large queries to ensure all records are fetched at once.

Answer

Placing SOQL queries inside helper methods called within loops.

Question 8

A developer needs to write a secure SOQL query that prevents unauthorized data exposure by respecting both sharing rules and field-level security. Which TWO approaches can the developer combine to achieve this? (Choose two.)

Accepted Answer

Include the 'WITH SECURITY_ENFORCED' clause in the SOQL query.. Sharing rules are enforced via class keywords, while FLS can be enforced using WITH SECURITY_ENFORCED or Security.stripInaccessible.

Answer

Disable FLS checks in user profile settings before executing queries.

Answer

Execute queries inside an asynchronous @future method.

Answer

Use the 'without sharing' keyword on all transaction controllers.

Question 9

A developer wants to ensure that a custom Apex REST service method properly handles authentication and executes securely in the context of the calling user. How should the class be defined?

Accepted Answer

global class with sharing. Apex REST services must be global classes, and specifying with sharing ensures sharing rules are respected.

Answer

webservice class without sharing

Answer

public class with sharing

Answer

private class inherited sharing

Question 10

Which THREE design patterns or tools help ensure secure coding practices regarding CRUD and FLS in Apex? Choose 3 options.

Accepted Answer

Using Security.stripInaccessible() before upserting data.. Security.stripInaccessible, WITH SECURITY_ENFORCED clause, and explicit Schema describe checks are valid methods.

Answer

Declaring every class with 'without sharing'.

Answer

Relying solely on Lightning Web Component HTML rendering tags.

Question 11

An Apex transaction performs a DML operation, followed by a callout to an external REST API, followed by another DML operation. What exception will Salesforce throw?

Accepted Answer

CalloutException. Salesforce throws a CalloutException when a DML operation has occurred before a callout in the same transaction, to prevent database locks.

Answer

AsyncException

Answer

LimitException

Answer

SystemException

Question 12

When deploying via Metadata API, what happens if a test class fails during the deployment?

Accepted Answer

The deployment fails and rolls back all changes.. The entire deployment fails by default unless specified otherwise.

Answer

Only the failing test class is ignored.

Answer

The deployment succeeds but flags a warning.

Answer

The deployment continues but prevents Apex compilation.

Question 13

An Apex trigger executes during a bulk insert of 300 records. To adhere to best practices regarding governor limits and bulkification, how should SOQL queries be written?

Accepted Answer

Query once outside the loop using a collection of IDs from Trigger.new. Queries must be written using bulkified collections, querying once outside of loops using bind variables for all records in Trigger.new.

Answer

Query inside a for-loop iterating over Trigger.new

Answer

Query each record individually using Limits.getQueries() checks

Answer

Use an asynchronous future method for every individual record

Question 14

Which THREE best practices should a developer follow to avoid governor limits when writing SOQL queries in Apex? Choose 3 options.

Accepted Answer

Query only the specific fields needed rather than using SELECT *.. Best practices include avoiding queries inside loops, using bind variables, and querying only necessary fields.

Answer

Execute a separate SOQL query for every child record individually.

Answer

Always use SELECT FIELDS(ALL) to ensure all data is retrieved.

Question 15

Which THREE operations can cause an automatic roll back of an entire Apex transaction? Choose 3 options.

Accepted Answer

Exceeding a governor limit such as SOQL query count.. Unhandled exceptions, unhandled DML errors with allOrNone=true, and governor limit violations roll back the transaction.

Answer

Catching a DmlException inside a try-catch block.

Answer

Executing Database.insert(records, false) with partial failure.

Question 16

When a record-triggered flow performs an action that causes a trigger to fire, which order of execution phase is this?

Accepted Answer

The trigger executes immediately in the same transaction. This is part of the re-entrant execution, where Salesforce processes the trigger as part of the flow's transaction.

Answer

The flow fails

Answer

The trigger is queued for later

Answer

The trigger is ignored

Question 17

An Apex trigger executes a query inside a for-loop to fetch related child records for every parent Account in Trigger.new. The developer notices that when a data load of 200 accounts occurs, the governor limit for total SOQL queries issued is exceeded. How should the developer refactor the code?

Accepted Answer

Collect the Account IDs in a Set and execute a single SOQL query outside the loop using the IN operator.. To avoid hitting the governor limit of 100 SOQL queries per transaction, queries must be moved outside of loops and bulkified using collections.

Answer

Annotate the trigger with @ReadOnly to increase the query limit.

Answer

Wrap the query in a try-catch block and catch the QueryException.

Answer

Use the Database.executeBatch method to process each account in a separate transaction.

Question 18

A developer creates a custom Lightning Web Component that includes a wired property to retrieve account records. The component needs to react dynamically when the record data is updated via another component on the page. Which decorator should be used on the JavaScript property to receive reactive updates?

Accepted Answer

@wire. The @wire decorator in Lightning Web Components provisions a stream of data to a property or function reactively.

Answer

@api

Answer

@track

Answer

@readonly

Question 19

A developer has a Queueable Apex job that needs to query large volumes of data and perform updates. To optimize performance and avoid heap size limits, what is the best practice when querying records inside a Queueable Apex job?

Accepted Answer

Implement the Database.Batchable interface instead of Queueable.. Querying records using a SOQL Query Locator inside a batch or leveraging iterable queries helps manage memory efficiently, but for Queueable jobs, querying using SOQL for loops or batching ids helps avoid heap limits.

Answer

Assign all queried records to a single global List variable in the class.

Answer

Set the method execution context to read-only using @ReadOnly.

Question 20

Which THREE features are supported in Salesforce scratch orgs? (Choose three.)

Accepted Answer

Installing unlocked and managed packages for testing.. Scratch orgs support source tracking, custom configurations, and feature activation.

Answer

Permanent production status with unlimited user licenses.

Answer

Directly modifying standard Salesforce platform source code.