Free Practice Questions for Salesforce Sharing-and-Visibility-Architect Exam

Field-level security (FLS) defines which fields a user can view or edit. If a user can see some fields (like Name, Created Date, etc.) but not others, the issue is likely related to FLS settings on the user's profile.

Option A: Role-based sharing rules control record access, not field access.

Option B (Correct): The Sales User profile likely lacks FLS access for the fields in question. Adjusting the profile or permission sets to grant visibility to these fields will resolve the issue.

Option C: Page layouts define which fields are displayed but cannot override field-level security. If the profile lacks FLS access, the fields won’t appear regardless of the layout.

Field-Level Security in Apex: The isAccessible() method in Apex is used to verify whether a user has the necessary permissions to view a particular field. This ensures that users see only fields they are permitted to access based on their profile or permission set.

Why Option B is Correct:

The issue where sales reps can view shipment amounts, even though this should be restricted to managers, indicates a failure to enforce field-level security in the custom Apex code.

By using Schema.sObjectField.isAccessible() checks, developers can ensure that the Apex class respects field-level security settings.

Why Others Are Incorrect:

Option A: The isShareable keyword does not exist in Apex. Sharing rules and object-level permissions should be explicitly respected in the code.

Option C: While runAs is used in test classes to simulate user permissions, it is not applicable to enforce permissions in the runtime logic.

For detailed reference, see Salesforce Security Documentation: https://help.salesforce.com/

Grant Access Using Hierarchies:

By default, Salesforce allows access to records up the Role Hierarchy for objects where "Grant Access Using Hierarchies" is enabled. If this setting is disabled, users in higher roles cannot see records owned by users in lower roles.

Why Option C is Correct:

For the custom Shipment object, the "Grant Access Using Hierarchies" setting needs to be enabled to allow sales managers to access shipment records owned by their team members.

Why Others Are Incorrect:

Option A: Implicit sharing cannot be disabled by an admin; it is always active for certain relationships.

Option B: Ownership-based sharing rules are unnecessary if the Role Hierarchy is functioning correctly.

For more details, see Salesforce documentation on Object Sharing Settings: https://help.salesforce.com/