Salesforce Updated Development-Lifecycle-and-Deployment-Architect Exam Questions and Answers by umaiza

 Cross-site scripting is the most common reason that the prospect AppExchange products fail the security review. Cross-site scripting (XSS) is a type of web application vulnerability that allows an attacker to inject malicious code into a web page that is viewed by other users. XSS can compromise the security and privacy of the users, as well as the functionality and performance of the application. Salesforce has strict security standards and policies for AppExchange products, and any product that has XSS vulnerabilities will not pass the security review. CRUD/FLS, session hacking, and SOQL injection are also security issues that can affect AppExchange products, but they are not as common or severe as XSS.

 Using a Change Set or manually replicating the changes in the developer sandbox are both valid approaches to ensure that changes made in production are reflected in the sandbox that the developers are working on. Refreshing the developer sandbox would overwrite any changes made by the developers, and Salesforce-to-Salesforce is not a deployment tool.

This is the correct answer because developers should work on feature branches that are derived from the develop branch, which represents the latest stable version of the code. The feature branches should then be merged back into the develop branch after they are completed and tested. This way, the develop branch always contains the most updated code that is ready for release.

 The following issues could be affecting their deployment times:

The number and complexity of Apex tests will have a large impact on the deployment time, as the tests will take longer to run and consume more resources.

Some components such as profiles, custom junction objects, and fields take longer to process than others, as they have more dependencies and validations to check.

Users are working in the org during deployment can affect users and the deployment, as they can lock records or metadata components that are being deployed, causing errors or delays.