Salesforce Updated Plat-Arch-205 Exam Questions and Answers by lauren

A public group provides the appropriate reusable population for auditors who are distributed across the organization but share the same record-visibility requirement. UC can maintain the auditors in one group and use an appropriate sharing rule to grant that group access to the qualifying high-value Opportunities. Placing auditors at the top of the role hierarchy would distort the hierarchy ' s business meaning and could expose many unrelated records because hierarchy access is broader than the audit requirement. Adding auditors to every salesperson ' s default Opportunity Team would also be operationally cumbersome and semantically wrong: Opportunity Teams represent collaboration on specific deals, not an enterprise audit function. The public-group pattern separates organizational position from the functional access requirement and makes membership easy to maintain as auditors join or leave the team. With a Private Opportunity OWD, the group should receive only the records needed for the audit process. Study Guide reference: Access to Records - public groups, criteria-based sharing, Private OWD, cross-functional access, and least-privilege audit design.

The finance analyst receives parent implicit access to the Account because she has been granted access to the related Opportunity. Salesforce provides Read Only access to the parent Account when a user has legitimate access to certain standard child records such as Opportunities, Cases, or Contacts. This lets the user understand the customer context of a record the user is authorized to work with. The same rule does not mean that Opportunity access automatically grants visibility to every Contact associated with that Account; Contact access depends on the organization ' s Contact sharing configuration and other applicable access mechanisms. The role hierarchy is also not the cause described here, because the new visibility appears specifically after the Opportunity was shared to the analyst. The scenario is testing standard implicit sharing rather than a deliberately configured sharing rule. Study Guide reference: Access to Records - implicit sharing, parent implicit access, Opportunity-to-Account relationships, standard-object sharing behavior, and Private OWD.

Large changes to roles, ownership, OWD, and sharing rules can force Salesforce to recalculate very large numbers of sharing rows. In an organization with a complex hierarchy spanning many regions and countries, that recalculation can become a major operational event. Parallel sharing recalculation is the relevant capability because Salesforce can process eligible portions of the sharing recalculation workload concurrently instead of treating the entire job as one serial operation. Divisions are primarily a data-partitioning and reporting feature; they do not optimize access recalculation. Skinny tables are database-query performance structures and likewise do not address the sharing model. The architect should also recognize that Account sharing changes can cascade into related Contacts, Opportunities, and Cases through implicit sharing relationships, increasing the scale of the work. Major hierarchy and ownership reorganizations therefore require planned maintenance, monitoring of background sharing jobs, and a design that limits unnecessary complexity in the role and group model. Study Guide reference: Implications of Security Model Choice - enterprise-scale sharing, hierarchy changes, ownership realignment, parallel recalculation, and sharing performance.

System.runAs() is used in Apex tests to execute a block of code in the context of a specified user so that user-dependent record-sharing behavior can be verified. It is particularly useful when the application relies on a Private OWD, role hierarchy, manual or managed shares, or classes declared with sharing. A well-designed test creates representative users, runs the relevant code under those users, and confirms that authorized users can retrieve the intended records while unauthorized users cannot. The key distinction is that runAs() is not itself a production security mechanism and does not replace explicit enforcement of CRUD or Field-Level Security. Object permissions, field permissions, and record sharing remain separate layers that the implementation must enforce appropriately. This question therefore focuses on the sharing aspect of user context rather than on field-level authorization. Study Guide reference: Access to Records - Apex sharing tests, System.runAs(), user context, record visibility, and secure testing of sharing behavior.