Docsity
Docsity

Prepare for your exams
Prepare for your exams

Study with the several resources on Docsity


Earn points to download
Earn points to download

Earn points by helping other students or get them with a premium plan


Guidelines and tips
Guidelines and tips

Navigating the Path to Excellence: A Comprehensive Guide to Achieving Your Salesforce Adm, Exams of Business Administration

Navigating the Path to Excellence: A Comprehensive Guide to Achieving Your Salesforce Admin Certification. An Ultimate Guide to Grade A+ Score Latest Updated Exam Study Guide 2025/2026.

Typology: Exams

2024/2025

Available from 06/12/2025

TUTOR2025
TUTOR2025 🇬🇧

3

(4)

774 documents

1 / 77

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
Navigating the Path to Excellence: A Comprehensive
Guide to Achieving Your Salesforce Admin Certification.
An Ultimate Guide to Grade A+ Score
Latest Updated Exam Study Guide 2025/2026.
What is the Organization Setup? - ansThe Organization Setup is a crucial step before starting
an implementation, including the basic settings like time zone, language, and currency.
Administrators should also be familiar with additional information found in this section, such
as data/file storage, license counts, and API usage.
What does changing the Locale impact? - ansLocale settings control how different values are
displayed within Salesforce. A configuration of the default locale impacts the format of date,
time, number, phone, name and address fields.
What does the locale control? - ansLocale controls the language and format of date and time,
address, currency, name, and number fields. The default for anything in the organization,
unless you change it in the personal locale (Locale, Language and Time Zone)
Where are the company defaults set? - ansThe company defaults are set on the Company
Information page. New users use the company default settings.
What can users do in with their personal settings? - ansUsers can override company default
locale settings. Managed in Language and Time Zone settings in user's personal settings. The
personal locale can vary from org local and can be changed in personal settings.
What do the language settings define? - ansLanguage settings define the default language of
the Salesforce org and the languages that users will be able to use in their personal settings.
What are fully supported languages and how many are there? - ansFully supported languages
means all Salesforce features, including User Interface, Setup, and Help, will display in the
selected language. There are currently 18 fully supported languages, including English,
German, French, Russian, Spanish, Japanese, Korean and Thai.
What are end user languages and how many are there? - ansEnd User languages will have
translations for all standard object field labels and pages but not Setup and Help. There are
currently 17 end-user languages available, including Vietnamese, Polish, and Greek.
What are platform languages and how many are there? - ansFor Platform languages, it is
possible to provide translations for customizations and standard fields. If translations are not
provided, labels fall back to English. There are over 30 platform-only languages, including
English (Australia), English (Canada), Irish, Hindi, and Tamil.
Where is the default language set? - ansThe Default Language is set on the Company
Information page and will be applied to new users.
Where can custom fields, labels etc. be translated? - ansThe Translation Workbench allows
translations to be applied to custom fields, labels, and translations from managed packages
and custom picklist values.
What language does the Salesforce Profile have when it is first set up? - ansThe language on
the Company Settings page is applied to new users, but it can be overridden in My Settings.
What the org ID in Salesforce? - ansThe Salesforce Organization ID or 'Org ID' is a unique
15 character identifier that identifies each Salesforce organization and is different in each
environment.
What does a Salesforce license do? - ansA Salesforce license, or license definition, defines
what features and services are made available to an org.
What different license types are there in Salesforce? - ans- User licenses define the baseline
of features available to a user. Each user must be assigned one license.
- Feature licenses grants access to additional features that are not included in a standard
license, such as Marketing, Knowledge, or CRM content.
- Permission set licenses gradually grant users access to features that are not included in their
user licenses.
pf3
pf4
pf5
pf8
pf9
pfa
pfd
pfe
pff
pf12
pf13
pf14
pf15
pf16
pf17
pf18
pf19
pf1a
pf1b
pf1c
pf1d
pf1e
pf1f
pf20
pf21
pf22
pf23
pf24
pf25
pf26
pf27
pf28
pf29
pf2a
pf2b
pf2c
pf2d
pf2e
pf2f
pf30
pf31
pf32
pf33
pf34
pf35
pf36
pf37
pf38
pf39
pf3a
pf3b
pf3c
pf3d
pf3e
pf3f
pf40
pf41
pf42
pf43
pf44
pf45
pf46
pf47
pf48
pf49
pf4a
pf4b
pf4c
pf4d

Partial preview of the text

Download Navigating the Path to Excellence: A Comprehensive Guide to Achieving Your Salesforce Adm and more Exams Business Administration in PDF only on Docsity!

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

What is the Organization Setup? - ansThe Organization Setup is a crucial step before starting an implementation, including the basic settings like time zone, language, and currency. Administrators should also be familiar with additional information found in this section, such as data/file storage, license counts, and API usage. What does changing the Locale impact? - ansLocale settings control how different values are displayed within Salesforce. A configuration of the default locale impacts the format of date, time, number, phone, name and address fields. What does the locale control? - ansLocale controls the language and format of date and time, address, currency, name, and number fields. The default for anything in the organization, unless you change it in the personal locale (Locale, Language and Time Zone) Where are the company defaults set? - ansThe company defaults are set on the Company Information page. New users use the company default settings. What can users do in with their personal settings? - ansUsers can override company default locale settings. Managed in Language and Time Zone settings in user's personal settings. The personal locale can vary from org local and can be changed in personal settings. What do the language settings define? - ansLanguage settings define the default language of the Salesforce org and the languages that users will be able to use in their personal settings. What are fully supported languages and how many are there? - ansFully supported languages means all Salesforce features, including User Interface, Setup, and Help, will display in the selected language. There are currently 18 fully supported languages, including English, German, French, Russian, Spanish, Japanese, Korean and Thai. What are end user languages and how many are there? - ansEnd User languages will have translations for all standard object field labels and pages but not Setup and Help. There are currently 17 end-user languages available, including Vietnamese, Polish, and Greek. What are platform languages and how many are there? - ansFor Platform languages, it is possible to provide translations for customizations and standard fields. If translations are not provided, labels fall back to English. There are over 30 platform-only languages, including English (Australia), English (Canada), Irish, Hindi, and Tamil. Where is the default language set? - ansThe Default Language is set on the Company Information page and will be applied to new users. Where can custom fields, labels etc. be translated? - ansThe Translation Workbench allows translations to be applied to custom fields, labels, and translations from managed packages and custom picklist values. What language does the Salesforce Profile have when it is first set up? - ansThe language on the Company Settings page is applied to new users, but it can be overridden in My Settings. What the org ID in Salesforce? - ansThe Salesforce Organization ID or 'Org ID' is a unique 15 character identifier that identifies each Salesforce organization and is different in each environment. What does a Salesforce license do? - ansA Salesforce license, or license definition, defines what features and services are made available to an org. What different license types are there in Salesforce? - ans- User licenses define the baseline of features available to a user. Each user must be assigned one license.

  • Feature licenses grants access to additional features that are not included in a standard license, such as Marketing, Knowledge, or CRM content.
  • Permission set licenses gradually grant users access to features that are not included in their user licenses.

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

What is the Salesforce API? - ansThe API (Application Programming Interface) allows programmatic access to Salesforce instead of using the user interface and is utilized by Data Loading and Integration tools. The number of API requests allowed within a 24 hour period is dependent on the edition and number of user licenses. The API is available for Enterprise, Unlimited, Developer, and Performance editions. What does the time zone set affect? - ansTime and Date fields will display according to the time zone setting. The Organization Time Zone is set on the Company Information page and is used as the default for new users. Users can set their own Time Zone which will override the organization setting. The time zone for new users is set using the default time zone on the Company Settings page, but users can override it in My Settings. What is the difference between single currency or multiple currencies? - ansThere are two types of currency organizations: single currency and multi-currency. Single currency organizations use one currency, which is set on the Company Information page. In multi- currency organizations, different currencies can be used for recording amounts on records. To enable multi-currency, it must be turned on in the Company Information page, and a corporate currency (HQ-currency) is defined. The currency symbol in amount fields will reflect the currency locale. What is Multi-currency used for? - ansMulti-currency is used to be able to add amounts in different currencies on records and be able to forecast and report using the corporate currency or record currency. What does the advanced currency management allow? - ansAdvanced currency management allows dated exchange rates to be recorded to track the amounts when opportunities were closed. This is useful if you need to have the exchange rate on a specific date. What is the difference between the primary and secondary currency? - ansThe primary currency reflects either the default corporate currency or the currency selected for the record. The secondary currency reflects the personal default currency of the user running the report, or the currency specified in the report criteria. What are the business hours and holidays used for? - ansBusiness hours and holidays are used in calculations to determine when to escalate a case or when an entitlement milestone is reached. What fiscal year configurations are there? - ansThe options to define the fiscal years are standard or custom fiscal years. Standard fiscal years are based on a monthly structure and can start on any month. Custom Fiscal years can use a different structure such as quarters. What categories of storage are there in Salesforce? - ansSalesforce has two categories of storage, Data (creating records) and File storage (storing files). Records use Data Storage and File Storage is used by Attachments, Documents, Files, Content and Chatter. What is controlled by the User Interface Settings? - ansThe following are controlled by the User Interface Settings: General User Interface, Sidebar (Classic Only) and Calendar What is the default record page view? - ansThere are two options available for specifying a default record page view at the org level - Full View and Grouped View. Where can user interface settings be modified? - ansUser interface settings are modified in the User Interface section in the Setup menu. What does the enablement of the hover details do? - ansEnables a summary display of a record when hovering over a record link. The fields displayed are determined by the compact page layout.

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

What happens when we share a direct link to the in-app guidance? - ansLinks to in-app guidance prompts and walkthroughs can be sent directly to users or attached to help menus and documents. The URL will open the guidance if it's active, and will change if the guidance's API name is changed. The link can be copied from within the in-app guidance builder or the walkthrough's row-level action menu, and a shareable URL can be copied from the In-App Guidance Builder's Details dialog or the row-level action menu in In-App Guidance Setup. What is the guidance center? - ansThe Guidance Center guides administrators in setting up and enhancing the Salesforce org and provides recommendations tailored for the org and the admin's level of experience. Items are ticked to indicate that they have been completed. Some items require making changes to org data, and a sync progress button has to be clicked in order to verify that the step has been completed. What is customizable in the search settings? - ansNumber of search results displayed, Document Content Search, Recently Viewed Records, Search Optimization, Limit search to records owned by the user What cannot be searched? - ansEncrypted, formula, and lookup fields cannot be searched. Search results do not override field-level security. Data in restricted fields do not return in the results. What can the global search box display? - ansA direct link to prompts and walkthroughs can be sent to users or the URL can be attached to the help menu or help documents. The URL will immediately open the in-app guidance, given that the guidance is active. If the API name of the in-app guidance is changed, the URL will also change. The link can be copied from within the in-app guidance builder or from the row-level action menu of the walkthrough. A shareable URL can be copied from the Settings from inside the In-App Guidance Builder on the Details dialog as well as from the row-level action menu on the In-App Guidance Setup page. What can be customized to include Lightning Knowledge fields in global search results in Lightning Experience? - ansThe search results layout of the Knowledge. What is the lookup search? - ansLookup Search is a feature that allows a user to search for a record of an object and associate it to a record of another object using a lookup field. What can be done to make the lookup search results more relevant? - ansLookup filters and dependent lookups can be configured to make the lookup search results more relevant. Lookup filters can be used to restrict the valid values and lookup dialog results for relationship fields. A dependent lookup is a lookup field that includes a lookup filter that references fields on the source object record. How many records can be searched in a list view? - ansIn a list view, only the first 2000 records are searched. Users can overcome this limitation by using more specific terms or by changing the filters and sorting order. What actions and features are available on list view? - ansEdit, Delete and Follow records, Sort, Filter, Create Printable View What is the federated search in Salesforce? - ansFederated search in Salesforce is a feature that allows users to search for information across multiple external data sources and display the results within the Salesforce platform. It enables users to access and search for information in other systems or databases, such as SharePoint, Box, or Google Drive, without leaving the Salesforce interface.

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

What does configurating the federated search do? - ansConfiguring federated search will allow users to search data stored in external repositories from the Salesforce interface. Users can use the global search and see results from an external search engine. Salesforce has partnered services to easily connect to external search providers. Federated Search can be configured in term-692Experience Cloud sites. What types of search layouts do exist in Salesforce? - ansSearch Results (Classic UI), Lookup Dialog (Classic UI), Lookup Phone Dialog (Classic UI), Tab (Classic UI), List View and Search Filter Fields (Lightning Experience UI)Search Results, Lookup Dialog, Lookup Phone Dialog, Tab, List View and Search Filter Fields What can be customized in the search layout? - ans- Fields in a record's instant results preview

  • Fields that can be filtered
  • Fields shown in a recommended result
  • The secondary field in instant results Where can the search layout be configured? - ansThe search layout for both lookup and global search can be configured from the Setup Menu or Object Manager. Standard Users cannot customize the Search Results layout. Where can record searches be performed by users? - ansGlobal searches most information; List View Search looks for a record within a list view; Lookup search allows searching of related records from a lookup field. What are search instant results? - ansInstant results are the returned search matches while a user is still typing on the search bar. The secondary field is displayed here in instant results. What is Einstein Search? - ansEinstein Search is enabled by default and provides features like search personalization, natural language search, and instant actionable results. It's available in Lightning Experience in Essentials, Professional, Enterprise, Performance, and Unlimited Editions. What does search personalization do? - ansSearch Personalization customizes search results based on user activity, geographic location, and ownership, among other factors. This feature is available for Accounts, Cases, Contacts, Leads, Opportunities, and Tasks. Prioritizing specific results over others can improve productivity, saving time and reducing costs. What is a list view? - ansA list view is a list or summary of records that meet defined criteria. What is the kanban view? - ansThis view can be set to show a graphical view of records in a list view. The Kanban View can be selected in place of the default table view. The records displayed in the Kanban view are based on the list view. To search records from within the kanban view we use the list view search bar. What does a user see in a list view? - ansRecords and Fields that appear in a List View depend on what the user has access to (e.g. own or have access to). The fields displayed are only those a user has visibility to according to the field-level security. What are the list view features? - ansThe List View in Salesforce offers several features to enhance user productivity. These include the ability to search within the view, display data as charts, toggle to a Kanban view, edit records directly in the view, apply filters, import data, and send emails to leads, contacts, and campaigns. The default list view can be accessed through Pinned List View. What are the six steps when creating a custom list? - ans1. Create and name a new list view or clone an existing list view.
  1. Select the List View sharing.

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

Custom Components that can be added to the home page layout: Links, Images, HTML, and Visualforce What are the 7 steps to create a Home Page? - ansCreating a custom Home Page involves the following steps:

  1. Create a new Home page or clone an existing Home page: The Lightning App Builder is used to create a new Home Page
  2. Select a standard or custom template: templates will determine the layout of the page components.
  3. Add components to the layout: Standard and custom components can be dragged and dropped in order to add them to the page.
  4. Optionally set component visibility: Visibility filters can be set for components on Lightning app and home pages to make them dynamic.The 'Set Component Visibility' section of a component's properties can be accessed to set the visibility conditions for a component. A Lightning home page can be made dynamic by setting visibility filters for components
  5. Activate the Home page: Once the home page has been saved, it needs to be activated to make it visible to the users
  6. Set as default for Org, App or App / Profile combination: The Home Page can be assigned as the Org Default, App Default or assigned to an App and Profile combination.
  7. Save and Edit Existing Home Pages: When you edit a page for the first time, Salesforce makes a copy of the standard page. This copy is what you can customize in the Lightning App Builder. Can custom component labels be translated? - ansCustom labels can be localized. The expression {!$Label.customLabelName} allows users to see labels in a chosen language, if a translation is created for that label in that language.The expression can be used to give a translated value on any component attribute of type string or rich text. What can be done with Dynamic Actions? - ansWith Dynamic Actions, Actions can be configured to only appear on the record page when the values on the fields match the criteria defined. What possibilites are there regarding assigning a home page layout? - ansCustom home pages can be assigned as org default, app default, or per app and profile combinations. The Standard Home page can be restored by selecting the System Default. What does the Lightning Usage App help with? - ansThe Lightning Usage App helps with monitoring adoption metrics and page performance. Can a lightning app be configured and how? - ansA Lightning app can be configured to selectively support form factors. If an app is configured to support the 'Phone' form factor only, for example, the Lightning app will only be accessible to mobile users. How can the logo and color of an app in the navigation bar be changed? - ansIt is possible to change the logo and color of the navigation bar in the 'App Manager' in Setup Which devices can the lightning app support? - ansThe Lightning app can be configured to support desktop, phone, or both devices. Under what condition can we add a component or page to the navigation bar of an app or the navigation menu of the Salesforce mobile app? - ansA tab must exist for a Lightning component or page in order to add it to the navigation bar of an app or the navigation menu of the Salesforce mobile app.

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

What are object-specific actions? - ansObject-specific actions allow creating a record that is related to the object for which the action is created. Fields can be added, removed, or reordered using the action layout editor for an object-specific action. What are global actions? - ansGlobal actions are available in places, like the home page, and allow action types such as create a record and log a call. What are standard publisher actions? - ansThese actions that are automatically included when Chatter is enabled, including Post, File, and Link. Standard actions require enabling feed tracking per object. What are custom actions? - ansCustom actions are newly created or customized actions that can either be global or object-specific, such as Create a Record, Send an Email, or Log a Call actions. They can also invoke Lightning components, flows, Visualforce pages, or canvas apps. Note that while object-specific quick actions support both Aura and Lightning web components, global quick actions only support Aura components. What are defaults actions? - ansDefault actions are predefined by Salesforce per object. For example, on the Account object, predefined actions include New Task, New Contact, etc. What are mobile smart actions? - ansMobile smart actions are preconfigured just like Default actions per object. It appears as a single action element in the page layout editor. For example, on the Account object, the actions include New Task, New Contact, New Opportunity, etc. These are displayed only in the Salesforce mobile app. What are productivity actions? - ansProductivity actions are predefined by Salesforce and attached to a limited set of objects, such as Send Email, Log a Call, View Website, etc. What types of quick actions are there? - ansQuick actions can be global or object-specific. Global:

  • Have no automatic relationship with any record
  • Can be found on the (+) icon in the Salesforce header
  • E.g. Create actions, Log a Call, Custom Actions Object-specific:
  • Automatically associated with related records
  • Can be found on the record detail page of a specific object
  • E.g. Create actions, Log A Call, Update Actions, Custom Actions What can global actions be created for? - ansGlobal actions can be created to perform any of the following:
  • Create a Standard Object Record (Account, Campaign, Case,Contact, Lead, Contract, Event, Group, Opportunity, Task, Question)
  • Create a Custom Object Record
  • Log a Call
  • Send an email
  • Display a Visualforce page
  • Display a Custom Canvas
  • Launch a Lightning Component What is a global pubisher layout? - ansGlobal actions have layouts of their own called global publisher layouts. A global publisher layout is not associated with any object. If an object page layout is not customized with actions, the actions on those object record pages are inherited from the global publisher layout. The position of the actions can be customized from: The Setup User, Interface Publisher, Layouts, and Global Actions.

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

  • Storage Limit: 1GB Data storage 1GB File storage
  • Initial Data: Configuration only
  • Refresh: 1 day Partial Copy Sandbox - ans- Purpose: Testing or training where a subset of the data is sufficient
  • Storage Limit: 5GB Data storageFile storage same as Production
  • Initial Data: Subset of data determined by template
  • Refresh: 5 days Full Copy Sandbox - ans- Purpose: Performance testing, load testing, and staging in an environment that is identical to production
  • Storage Limit: Same as Production
  • Initial Data: All data, but subset of data can be copied through a sandbox template
  • Refresh: 29 days What does deployment refer to in a Sandbox? - ansDeployment refers to moving the developments or customizations from one organization to another. Source org refers to the organization that contains newly made developments, ready to be moved to another organization requiring the features. Target org refers to the organization requiring the developments made on the source sandbox. The purpose can be quality assurance or user acceptance testing (another sandbox) or final use (production org). Depending on the source and target environment, various tools assist with deployment based on their features and limitations. What has be considered when moving Metadata between environments? - ansWhen considering moving metadata between environments, the environment type of the source and target will be a consideration. Some possible scenarios of source and target environments: Source → Target: Developer Edition → Developer Edition Related Sandbox → Related Sandbox Related Sandbox → Related Production Unrelated Org→Unrelated Org What deployment options are there to move metadata between different environments? - ans- Change Sets
  • Ant Migration Tool
  • Workbench
  • Salesforce Extensions for Visual Studio Code
  • Salesforce CLI
  • Unmanaged Package What are change sets? - ansChange Sets are a useful tool that can be created easily through configuration by an administrator. Change sets can be used to deploy metadata between related sandbox/production orgs through a deployment connection. A change set is created by adding main and dependent metadata components in the source org. Before a change set can be deployed, it needs to be uploaded. When using change sets, validation of components is possible before deployment. Multiple test options are available when validating or deploying a change set in the destination org. Inbound and outbound

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

change sets are used when deploying metadata components. Change sets are available in the following editions: Enterprise, Performance, Unlimited, Professional, and Database.com What are Outbound Change Sets? - ansThe Outbound Change Sets screen is located within the Environments section of Setup. Change sets are created here with new or modified components to be moved to another organization. Setup → Environments → Change Sets → Outbound Change Sets What are Inbound Change Sets? - ansThe Inbound Change Sets screen is located within the Environments section of Setup; both deployed change sets and those waiting to be deployed are displayed. Setup → Environments → Change Sets → Inbound Change Sets Which fields are required when setting up a new Salesforce user? - ansRequired fields include the following:

  • Last Name
    • Alias
  • Nickname
  • Email
  • Username
  • User
  • License
  • Profile The role is marked as required, but does not need to be selected to create a new user. Why does a user need a username? - ansEach user is uniquely identified by the information added when the user is set up. Usernames are unique across all Salesforce organizations globally and consequently cannot be reused. Usernames must be in email format, but do not need to be valid email addresses (e.g. martin@fof.com.sf would be a valid username). What needs to be done to complete the setup process by the user? - ansTo complete the setup process, the following steps need to be done:
  1. An account verification link sent via email is clicked.
  2. A password is created.
  3. A security question is created. Can any email domain be used for a user's email? - ansThe email domains that are allowed in a user's Email field can be restricted with the "Email Domain Allowlist" What needs to be taken into consideration on the SF account verification link? - ans- An email will be sent to the new user that contains the account verification link. By default, the link will expire after 7 days.
  • The account verification link will prompt the new user to set a new password. If the user fails to set the password before the link expires, the user will need to have the password reset by the admin before they can log in.
  • Before an admin-initiated email update is approved, a user is required to reset their password even if the 'Generate new password and notify user immediately' setting is not enabled, to ensure the security of the org. A password reset link is sent to the new email address to activate the new email address. How many users can be added at one time - ansUp to 10. The user name will be the same as the email address when adding a user with this method. Individual user records will need to be edited after creation to choose further details. 'Add

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

Custom Hierarchy Field. A warning will appear when a Salesforce Administrator attempts to deactivate a user. What does the self deactivation allow? - ansSelf Deactivation can be enabled to allow external Community and Chatter users to deactivate their own accounts. What are delegated administrators? - ansThe System Administrator can delegate certain administrative tasks to delegated administrators. A delegated group controls what admin privileges are granted.

  1. Create a delegated group.
  2. Add users.
  3. Assign capabilities. Which tasks of an administrator can be delegated? - ansAs an administrator these following tasks can be delegated: Create and assign users in certain roles and profiles, assign permissions sets, public groups, reset passwords, manage specific custom objects. What are some cmmon user access issues? - ans- Passwords: Passwords are case-sensitive.
  • Incorrect Username: The user is using the wrong username.
  • Locked Out: The account may be locked from too many failed login attempts.
  • Login Hours: The user may be trying to access the org outside of login hours set by the System Admin.
  • Mydomain policy: User tries to login with login.salesforce.com when Domain is deployed and login policy restricts login.salesforce.com.
  • Incorrect Domain: Trying to login using test.salesforce.com(used for sandbox)instead of login.salesforce.com
  • Profile based IP restrictions: IP restrictions may be in place, and the user is outside of set IPs.
  • Unverified account: The new user has not verified their account via the 'Verify Account' link within the allotted time. What organization security controls are there? - ans- Network Settings: At the organization level, network access settings allow specifying trusted IP ranges from where users can login without verifying their identity.
  • IP Restrictions: It is possible to control where users can log into Salesforce by specifying a range of trusted IP addresses in their profile settings. Login hours can also be defined.
  • Password Policies: Password policies can be defined at the profile level and the organization level to implement restrictions which make passwords more secure.
  • Device Activation: Different methods are available to allow users to confirm their identity. Using a device activation method acts as a second form of user authentication. What is the setup audit trail history? - ansThe setup audit trail history helps to track the recent setup changes that administrators have made to the org. If there are multiple administrators in the org, this is of great help in keeping a record of the changes. If a delegate (such as an administrator or customer support representative) makes a setup change on behalf of an end user, the Delegate User column shows the delegate's username. Setup audit trail by default shows twenty most recent setup changes and stores audit trail history for the past six months. Setup audit trail can be downloaded for the last six months in Excel (CSV format). What can an administrator configure in the settings to ensure that users' passwords are strong and secure? - ans1. Password Policies
  1. Password Expiration
  2. Password Resets

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

  1. Login Attempts And Lockout Periods On which levels can password policies be set? - ansPassword Policies can be set at an organization or profile level.
  • Profile Level: Profile Password Policies settings override the Organization-Wide Password Policies for that profile's users.
  • Organization Level: If Password Policies are not set for a profile, the organization-wide Password Policies apply.
  • Policy Changes: Changes to the organization-wide password policies do not affect profile- specific password policies which may be different. Which password requirements can be set by the administrator? - ansMinimum password length, complexity, password history enforcement, expiration period, minimum password lifetime Can passwords expire? - ansPasswords can expire for all users from setup, except for those with the 'Password Never Expires' permission. In Password Policies, it is possible to specify the length of time until a user password expires and must be changed. The default is 90 days, but it can be set to 30, 60, 90, 180, 'One year', or 'Never expires'. What can we configure regarding login attempts and lockout periods? - ansSettings for login attempts and lockout period can be specified in Password Policies. The number of invalid login attempts before a user is locked out can be specified. It can be set to 'No Limit', 3, 5, or
  1. It is possible to specify how long a user is locked out. It can be set to '15 minutes', ' minutes', '60 minutes', or 'Forever (must be reset by an admin)'. What do we need to consider when setting restrictions for resetting passwords? - ansA user's password can be reset for better protection. When the email address of a user is changed, the password is also reset for security.It is possible to change the password of specific users or all users by clicking the 'Reset Password' button on the 'Users' page in Setup. When a user's password is reset, the user receives an email that contains a link and instructions to reset the password. Resetting a locked-out user's password automatically unlocks the user's account. What methods can administrators use to authenticate users? - ansSingle Sign-On and Multi- Factor Authentication What is a Single Sign-On? - ansAn existing single sign-on capability can be used to standardize authentication for Salesforce users. In order to implement it, either federated authentication using Security Assertion Markup Language (SAML) or delegated authentication can be utilized.
  • Users only need to memorize one password to access the Salesforce org, authorized network resources, and external applications.
  • Password policies can be consistent across the corporate network and the Salesforce org.
  • There is a higher likelihood for users to use Salesforce with the ease of having a single login.
  • Users do not need to manually log in to Salesforce every time, reducing the risk of access issues because of misspelled user credentials.
  • Managing user access to sensitive information can be done in one place.
  • Single Sign-On allows users in the org to login to Salesforce and other applications using single user credentials with an external identity provider.
  • Single sign-on removes the need to log in to every single application every time. What is Multi-Factor Authentication? - ansMulti-factor authentication increases an org's security by requiring a second level of authentication for every user login. It can be either

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

browser deletes cookies) or the user browses in private mode. Verification is done via the highest priority verification method available in the following order:

  1. Salesforce Authenticator Mobile App
  2. Built-in Authenticator
  3. U2f Security Key
  4. One-time password generator
  5. SMS Text Message
  6. Email When is identity verification invoked? - ansThe identity verification is invoked when a user logs in from an unrecognized (based on cookies) browser or device, and outside the trusted IP range. What do we see with the login forensics? - ansLogin Forensics allows Salesforce Administrators to monitor login behavior and keep a Salesforce org secure. Login Forensics provides critical login information such as:
  • Users who have suspicious login activity
  • Users who logged in more than the average number of times
  • The average number of logins per user per a specified time period
  • Users who logged in during non-business hours
  • Users who logged in using suspicious IP ranges There is no user interface in Login Forensics. When a user try to access a Salesforce organization which checks are done? - ansProfile Level Login Hours, Profile Level IP Ranges, Company Level Trusted IP Ranges, Activation Code Validation What does the Security Health Check measure? - ansSecurity Health Check measures setting values in Password Policies, Network Access Config and Session Settings against baseline values and calculates a percentage score to indicate risk. 100% means all settings meet or exceed the standard. What is "My Domain"? - ansMy Domain is a feature that allows the creation of a subdomain for the company's Salesforce org. It is required in order to activate other Salesforce features. It allows highlighting the brand of the company and making the org more secure. It helps in better management of login and authentication of the org. What can the enhanced transaction security be used for? - ansEnhanced Transaction Security can be used to intercept real-time events and apply appropriate actions to monitor and control user activity. What does GDPR stand for? - ansGeneral Data Protection Regulation. GDPR is a European data protection law that regulates the processing, collection, storage, transfer, or use of personal data about EU individuals. What is the Data Processor (GDPR)? - ansProcesses data upon behalf of the data controller. This is Salesforce. What is the Data Controller (GDPR)? - ansSalesforce customer that is responsible for managing customer data What is the Data Subject (GDPR)? - ansAn Individual data collected relates to, such as a Lead,Contact or Person Account. Can also be a Salesforce end user. What are the key principles of GDPR? - ansPersonal Data must be handled according to the key principles.

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

  • Personal Data can only be collected for a legitimate purpose. Data use must be limited, explicit and for specific purposes.
  • Consent to collect and store personal data must be 'freely given, specific, informed, and unambiguous'. It can be revoked.
  • Personal Data must be deleted if it is no longer required for the original purpose.
  • Data must be kept secure and measures put in place to prevent unauthorized access, disclosure, loss, destruction or alteration.
  • Personal Data collected must be accurate and kept up to date.
  • Data is handled according to GDPR principles and demonstrates compliance via record keeping and reporting. How is the role hierarchy related to the record access? - ansUsers will have access to other users' records if they have a role above the record owner in the role hierarchy and grant access through hierarchies is enabled. What does a sharing rule allow? - ansA sharing rule allows granting access to records based on criteria or ownership What is manual sharing? - ansUsers can manually share individual records with other users using the Sharing button. What does a public group do? - ansA public group can be created for features such as sharing rules and folder access. What is field access? - ansField-level security can be defined in profiles to control visibility to fields within records. What is record access? - ansOrganization-wide default setting determines users' access to records they do not own. What is object access? - ansA user's profile determines whether a user can access an object and the access level. What does a user profile determine? - ansProfiles determine object access and permissions. Profiles determine which objects a user can access and what actions they can take on those objects. Permissions on objects can be set to: Create, Read, Edit, Delete, View All / Modify All. View All and Modify All grants access to all records of the object and overrides sharing settings. Profiles determine access to tabs and apps. There are different tab access settings.
  • Tab Hidden: Means the tab will not be visible for the object.
  • Default Off: 'Means that it is available for the user to add by customizing tabs.
  • Default On: Means the tab for the object will be in the navigation bar if it is part of the 'App' selected. What does the record access determine? - ansRecord-level access determines what a user can do with records of a particular object; Create, Read, Edit or Delete. Object permissions control what users can do with records they own. What dies OWD stand for and does it determine? - ansOrganization-Wide Defaults (OWD) determines access to other users' data for records they do NOT own and sets base record access for the org. When changing the OWD it needs to be taken into consideration that if increasing default access, changes will take effect immediately. If decreasing, changes may take significant time depending on data volumes. What can the OWD settings be for Price Books? - ansThe organization-wide default setting for Price Book can be 'No Access', 'View Only', or 'Use'. What can the OWD setting "Controlled by Campaign" be used for? - ansControlled by Campaign, an organization-wide default sharing setting, can be used for the campaign

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

object permission for opportunities doesn't have Edit, they will not be able to Edit opportunities. Role hierarchy is a way that access to records can be controlled based on a user's role.

  • Location: Roles are accessed via Manage Users > Roles Standard Object Default: Access to records of standard objects via hierarchies enabled by default and cannot be disabled
  • Setting: Access to records of custom objects via the role hierarchy can be disabled by unchecking 'Grant Access --- -- Using Hierarchies'. This setting is always enabled for standard objects and cannot be disabled. What is exact access? - ansExact access to contact, opportunity, and case records can be specified. Access can be set to these Access Types: No Access, View and Edit Access. These options only appear depending on the OWD settings of the object; they will not appear if the OWD setting is public. What do manager group allow users to do? - ansManager groups allow users to share records up or down their management chain.
  • Enable Setting: 'Manager Groups' can be enabled on the 'Sharing Settings' page. It is based on the Manager field on the user detail page. Once enabled, users can share records with their managers or manager subordinate groups.
  • Sharing with Manager Groups: Manual sharing, sharing rule, or Apex managed sharing can be used to share records with a manager group or manager subordinates group. What do sharing rules allow record access to be? - ansSharing rules allow record access to be:
  • Extended Access: Granted to other users based on their role, territory, public group membership, or manager groups, that they wouldn't normally have access to according to the organization-wide sharing settings.
  • Across Role Hierarchy: Extended across the role hierarchy, sharing records owned by one role with users in another role at the same level.
  • Across Territory Hierarchy: Extended across the territory hierarchy, sharing records owned by users in a territory or with users in a territory. For what purpose would sharing rules be created? - ansSharing rules can be created to grant access to groups of users for certain records based on record owner or criteria. This criteria- based sharing rule uses record criteria to grant all internal users access to active accounts. An option can be selected to include records owned by high-volume site or system users. What access does a user get through sharing rules? - ansSharing rules extend the access that have been established via the OWD and role hierarchy. What happens if a sharing rule allows a user to view or edit certain records but the user's profile does not give them 'read' access to the object? - ansThe user will not be able to access the records associated with the sharing rule. What does the profile determine regarding access and what do the sharing rules do? - ansA profile determines at the base level what can be done with the records of a certain object, while a sharing rule opens up access to the records of the object. What does manual sharing allow users? - ansManual sharing allows a user to use the 'Sharing' button to grant access to a specific record to other users, roles, roles and subordinates, territories, territories and subordinates, and public groups. Can any user with any role in the hierarchy share a record? - ansIn order to manually share a record, a user has to be the owner of the record, or above the owner in the role hierarchy, a user with 'full' access or an administrator. A user with full access can view, edit, delete and

Guide to Achieving Your Salesforce Admin Certification.

An Ultimate Guide to Grade A+ Score

Latest Updated Exam Study Guide 2025/2026.

transfer a record. The user can also extend sharing access to other users but cannot grant full access to the users. What are the two manual sharing access options? - ans- READ/WRITE: view and edit, add associated records, notes and attachments

  • READ ONLY: view, add associated records, cannot edit or add attachments or notes What does the 'Manual User Record Sharing' checkbox on the 'Sharing Settings' page in Setup allows users to do? - ansThe 'Manual User Record Sharing' checkbox on the 'Sharing Settings' page in Setup allows users to manually share their own user record with other users of an organization. If this is unchecked, the 'Sharing' button will not be visible in the user detail page. The 'Sharing Hierarchy' button can be used to determine what? - ansThe 'Sharing Hierarchy' button can be used to determine why a user has access to a record. It is available for accounts, opportunities, cases, contacts, leads, and custom objects. The list of users who have access to the record and its associated records are shown. Clicking the 'View' button shows why a user has access to the record. After clicking the 'View' button, the type of access as well as the reason for a user's access to the record is shown. What determines the access to reports and dashboards a user has? - ansAccess to reports and dashboards are determined by the access level to the folder in which they are contained. Access level can be defined for a particular user, group, territory, or role. When giving access to report or dashboard folders, what three access levels are there? - ans- Viewer: This access level allows a user to view reports & dashboards as well as access levels.
  • Editor: This access level allows a user to do what a viewer can do, but they can also save, delete or rename a report or dashboard in the folder.
  • Manager: This access level allows a user to do what an editor can do, but they can also share or delete a folder, change the folder's name, and also change the folder's sharing setting. A user who creates a folder is the folder's 'Manager'. A folder is public if it doesn't have Manager access. Users' access to reports and dashboards is determined by a combination of user permissions. What are some these user permissions? - ans- Users can run reports using this permission. It also allows viewing dashboards if the user has access to the dashboard folder.
  • The permission to schedule reports allows a user to schedule reports.
  • The permission to subscribe to dashboards allows a user to subscribe to dashboards.
  • The permission called "report builder" allows users to create, edit, and delete reports in public and private folders in Salesforce Classic or Lightning Experience, depending on the selected permission.
  • The permission named "create and customize reports" allows a user to create, edit, and delete reports in the 'My Personal Custom Reports' folder. Reports can also be saved to any shared folder if sharing rights allow.
  • The permission called "create and customize dashboards" can be assigned to allow a user to create, edit, and delete dashboards in the 'My Personal Dashboards' folder. Dashboards can also be saved to any shared folder if sharing rights allow.
  • When the permission "manage reports in public folders" is assigned, a user can create, edit, and delete reports, and manage their sharing in all public report folders.
  • When the permission "manage dashboards in public folders" is assigned, a user can create, edit, and delete dashboards, and manage their sharing in all public dashboard folders.