CTA Q&A Flashcards
(198 cards)
1
Q
What Governance?
A
Setup Steering Committee who owns Vision, Strategy, Provides prioritisation, oversee project budgets and act as a final escalation point. It includes IT Leaders/ CIOs/ Directors across BUs and IT and Program/Project, Managers
Set up COE governance consisting of the executive sponsor, Prog team, Arch, Business and they define standards, Manages demand intake, Release Manage.
Setup ARB which includes SF Architects, EA other Arch. They define Project architectural and design stds and provide advice to Project Team
2
Q
bullk api v2 - hows it different?
A
Bulk API 2.0 allows for:
*Easy-to-monitor job status.
*Automatic retry of failed records.
*Support for parallel processing.
*Auto batch management.
*All OAuth flows supported vs not supported (Need to use SOAP Login or get session id from OAuth flow then use it)
*CSV file format vs CSV, XML, JSON etc supported
*150 MB file size vs 10 MB file size
3
Q
What is a Signed Request?
A
The Signed Request is a JSON object signed with HMAC SHA-256 and a shared secret. The request contains the consumer key, access token, the file ID/URL, timestamp and any other required contextual information. Example Request:
POST https://efnolfiles.farmers.com/download-file
Header->signed_request: 9Rpl6rE7R2bSNjoSfYdERk8nffmgtKQNhr5U/5eSJPI=.eyJjb250ZXh0Ijp7InVzZXIiOnsibGFuZ3V….
4
Q
How to import Articles
A
before you can import Knowledge Base, you must first create a .csv file, a .properties file, and then a zip file.
It can have translation article too.
5
Q
How to set up JWT token from Mule to SF?
A
- from SF generate certificate
- download the public key certificate and set up Connect app with it with Oauth setting
- pre-approval integration user profile/PS for this connected app
- Export the Key Store from SF and save it in Mule’s API app
- In Mule’s app SF connection setting, point to the keystore file and its password and save the client ID from the connected app, principle is Integration User account, as well as set SF Token endpoint
6
Q
What is Apex Continuations?
A
Apex Continuations are a mechanism provided by the Salesforce platform that allow you to make asynchronous long-running requests to an external Web Service. This is not counted as maximum 10 concurrent synchronous callout which lasts more than 5 seconds
7
Q
How to set up JWT token from Salesforce to Other web service?
A
- from SF generate certificate
- download the public key certificate
- Set up a client app in API gateway and load the public key certificate into trust store
4 Create a named credential, JWT token exchange for named principal - Issuer = client ID from the client App, subject = user, endpoint URL to the webservice address
- call out using named credential
8
Q
Salesforce Concurrency
A
For inbound calls through SOAP/REST APIs, it is 25 concurrent calls with a duration of 20 seconds or longer.
For outbound Apex callouts with more than 5 seconds, you can only have 10 concurrent callouts at max.
Note. callout time is not counted
9
Q
Quip Integration with Salesforce?
A
Creates Quip auth. provider
Creates Quip external data source
Creates Quip permission set
Creates Quip Integration Object Access permission set
Assigns Quip external data source to new permission sets
Configures Files Connect
10
Q
Salesforce Security in Session Management?
A
1 Session Setting
2 Caching
3 Identity Verification
4 Clickjack Protection
5 Cross-Site Request Forgery (CSRF) protection
6 Content Security Policy (CSP) protection
7 Lightning Locker and Lightning Web Security (Beta)
8 XSS Protection
9 Content Sniffing Protection
10 Referrer URL Protection
11 Redirections
12 Session Security Levels
11
Q
Transaction Security Actions and Notifications
A
1 Block
2 MFA challenge
3 Email Notification
4 In-app Notification
12
Q
AWS Signature Version 4 Named Credential
A
Require AWS Access Key ID, AWS Secret Access Ke, AWS Region and AWS Service
13
Q
Translation Workbench?
A
Use Translation Workbench to maintain translated values for metadata and data labels in your Salesforce org. Specify languages for translation and assign translators for each language.
Manage translated values for any Salesforce supported language.
Translators can maintain translations directly through the workbench, or you can export translation files for bulk translation imports.
14
Q
Person Account?
A
SF Data model to implement B2C relationship.
It can’t be linked in a direct relationship to other accounts or they can’t be part of account hierarchy or they need to be manually enabled and once enabled they can’t be disabled
Contact OWD has to be Private or CBP,
some AppX packages may not support PA
storage - stored as Contact and Account
can be merged with only other PAs
Lead conversion - if Lead has Company field, then it will be converted to Biz Account
15
Q
What to know about Asset?
A
1 Need turn on Asset Sharing from Asset Setting to use Sharing rule
2 Asset doesn’t take up data storage
3 Asset can build up Hierarchy
4 Asset Relationship object
16
Q
Multi-Language on Community Steps?
A
1, Set default language
2, Add languages and set its options
3, Export and prepare the content for translation or translate directly on the page
4, import translated content
5 Add language selector on pages for unauthenticated users.
17
Q
Ratio of Community Login Based License
A
1-20; 1k monthly logins will provision 20k login license in the org
18
Q
Platform Event Replay ID?
A
1, populated when event is delivered to subscribers
2, Replay ID values not guaranteed in sequence
3, setReply(), by default -1, receive new events; -2 receive all events
19
Q
How to replay Platform Event for failed connection?
A
ESB stores replay ID. To catch up missed events, ESB re-subscribe with a specific replay ID saved
20
Q
Outbound Message?
A
1, SOAP based server endpoint
2, Custom Service listener at endpoint to accept OM from SF and send back acknowlegement
3, only 1 object
4, 1 Single SOAP message can contain up to 100 notifications
5, Only the most up-to-date information is sent to provide idempotency
6, Support Mutual Authentication
7, Messages are retried independent of their order in the queue. This might result in messages being delivered out of order.
8 can’t build an audit trail using outbound messages.While each message should be delivered at least once, it might be delivered more than once. Also, it might not be delivered at all if delivery cannot be done within 24 hours. Finally, as noted above, the source object might change after a notification is sent but before it is delivered, so the endpoint will only receive the latest data, not any intermediate changes.
21
Q
Critical Limit
A
- Number of synchronous concurrent transactions for long-running transactions that last longer than 5 seconds — 10
- Bulk 2.0 Maximum data load per day —- 150 Mil, 10k jobs
- Internal Role —10k, External Role-500k
- W2L - 500 p/d, W2C 5k p/d
- Concurrent API request calls to SF over 20 seconds - 25
- Platform Event Publish -250k, Event Delivery 50k, by default.
- Platform Event Add on - 100k additional for Delivery p/d, 3 mil additional p/m
- Platform Event Message size - 1MB
22
Q
What license is required for omni-channel?
A
License options that enable Omni:
Service Cloud
Digital Engagement
Service Cloud Voice
Workforce Engagement Management
Licenses 2/3/4 above are add-ons which can be sold on top of Sales or Service cloud licenses
23
Q
High level DocuSign flow - what objects are created and maintained by DocuSign.
how to detect user signed the document?
A
Envelope and Receipient; Receipient to track user sign process. Use Trigger on it for further automation. Writeback is to update SF record based on custom tag set from docusign in the document, not for tracking
24
Q
What consists of Sharing Table Record?
A
ParentID, ObjectAccessLevel, RowCause, User or Group ID
25
What is in the Sharing Table?
Role Hierarchy is not; Only the record owner and users above the owner in the role hierarchy are granted Full Access to the record. It is not possible to grant other users Full Access; Best use Without Sharing Apex for Apex Sharing
26
MFA for FB only and not for LinkedIn
At profile level set up 'Session security level at login' for profile at 'High Assurance'
At setup level 'Session Settings' --> FB Session security level to 'Standard' but Linked in as High Assurance
So when user logs in with FB (example) user will have Standard security on login and based on profile it will need high assurance so it will ask for MFA.
27
Class vs Platform encryption
128 AES vs 256 AES algorithm
Fields can be masked vs cannot be masked
Cannot encrypt standard fields vs can encrypt some standard fields
Cannot encrypt files vs can encrypt files, attachments and contents
Cannot search vs can search
Cannot be used in workflow/approval process vs can be used
28
API Whitelisting (via connected app)
On the connected App, add the trusted IP ranges to filter out access to connected app based on IP.
29
Describe UA flow embedded SSO.
"UA Flow with embedded SAML -
SP initiated F-SSO -- SF generates SSO request along with RelayState
user is redirected to IdP
IdP authenticates user, generates SAML , redirects to SP (ACS URL)
SP validates assertions, creates SF session and redirects to RelayState (/authorize)
OAUTH flow resume"
30
How to select a currency for record?
Each record has the currencyISO option to select.
31
Difference between federation authentication and delegated authentication
federation authentication cannot choose a subset of users but delegate one can.
Major risk for Delegated Authentication is: the password or token will be transferred from the web. server needs to protect the password.
32
The objects that can have ‘Controlled by Parent’ OWD settings are
Order, Contact (Contact only has CBP and Private), Asset, Activity (only CBP and Private), a few channel program and Contact Point objects.
33
To allow community users see each other in discussions
Community User Visibility from Sharing Setting,
and Allow Community user see others in Community Administration both need to be selected.
34
Why use a custom Close Date (Locked Date) instead of the standard Close Date?
While the opportunity is open, the user can set the opportunity Close Date to any date. When setting the opportunity Stage to Closed Won, the Close Date gets set to the current date. When setting the Stage to Closed Lost, it is not changed to the current date, which will affect the 7-day requirement.
35
Lead Conversion
Lead conversion needs convert lead permission, and also need access to account, contact and opportunity
36
related items on the Opportunity detail page sometimes take a long time to load and the page freezes until the records are loaded.
Enable Separate loading of related lists
Reduce the number of related list
Reduce the number of records in troubled related list
Reduce the fields displayed in troubled related list
Use Single Related list component to display those in separate tabs
37
The Sales Manager wants the ability to put any created opportunities that are in the pipeline under freeze, if the customer has any credit health issues and is deemed to be red account.
Flow Before Trigger on Oppty to check its account status to set a Oppty Freeze custom field to True, Update Record Type to Locked RT
Create VR on both Oppty and Oppty Product to prevent record save by checking this field
Create Locked RT and Locked Layout, removing all related list buttons
Note: users can still edit standard fields and only hit error after save
38
When a complaint is open for more than 7 days, a chatter feed should be posted to the Regional Manager.
Flow After Trigger on Case (Type =‘Complaint’) with Schedule Action to check case status after 7 Days, post Chatter if Case is not Closed
Can’t use Case escalation rule as it only notifies via email
PB can achieve this but poor performance
Schedule Flow can also be considered but it has limited schedule options
39
Resetting of passwords for internal staff should be prevented in Salesforce.
Enable delegated authentication then
Enable ‘Is Single Sign-On Enabled’ permission for the internal users
This will automatically prevent password reset to users
40
Recommend a solution to secure access to Salesforce in the event the user loses his/her mobile device. (MFA)
revoke their mobile oauth session
remove mobile phone from user record
Reset Okta MFA for the user
Ask SF admin to generate Temp Verification Code setting exp. time 1h-24h
41
what feature to use to integration an native app with Salesforce?
Mobile SDK? Preferred
connected app in SF
user agent oauth flow (SAML, SSO)
2. API directly
42
what advantage of mobile SDK over custom integration solution
SDK provides authentication authorisation natively
Offline mobile sync
smart store encrypted db
all other mobile services
community support(need understand more)
push notification (need understand more)
43
Use a website to capture lead
web to lead function - 500 a day
pardot form – like event registration
marketing landing form?
custom API build if the volume is large
app exchange product for advance features
44
In data migration, how to keep the original created date, modified date history?
contact salesforce to enable some auditing feature to allow updating those fields based on the source data.
Set Audit Fields upon Record Creation
45
In data migration, how to accomplish loading the historical auditing information
cannot insert history tracking object
can use big object to store it
or use EA to load those information for analytics purpose
46
what is skinny table, and pros and cons?
Skinny table is a feature to ask SF to create which consolidate the regular used fields (standard and custom) for same object to a dedicated table in the backend so performance can be improved for LDV object.
Pros:
performance of query, reporting , list view should be improved
can contain 100 fields, support encrypted fields
Full data sandbox can automatically have it after refresh
Cons:
developer type of sandboxes won’t have it - can contact SF
Any field type change requires contact to SF to recreate it
can’t get field from other objects
maintenance overhead
Read is better but DML is worse as SF needs to DML on two tables
Only support a few Standard objects Account, Contact, Opportunity, Lead, and Case objects
47
SF file limit
2GB on desktop, 100 MB from mobile
48
Does In-app guidance support translation and what rich media supported?
Yes, via translation workbench. Pic and Video (Embed)
49
how to allow CC user to create account, contact and person account?
The only issue is the ownership. CC user can be the owner of contact but not the other two. So use a before RTFlow to assign the ownership to an internal user would be the solution.
For household model, a household account can be created behind the scene and associate two PAs with it. Using Sharingset user.account.householdaccount = xxx.account.householdaccount to share records
50
Can you create records via Rest API which has duplication rule enabled and trigger it?
No. DuplicateRuleHeader is only available in SOAP API which allows you to handle duplicate records properly.
51
How to allow Email send to be draft and approved before sending out?
1 enable 'Email Draft Service' from support setting
2 Create Send Action on Email Message object
3. Create Approval Process on EM object and use Send Action as final approval action.
52
How to make VF email for multi language?
1. Create custom labels for each sentence you want to send, and provide a translation for every language you would like to send the emails in.
2. Include the required custom labels into your Visualforce email template.
3. Select the desired language for the language attribute of messaging:emailTemplate.
53
Lightning Locker Vs Lightning Web Security?
1 Cross-namespace component use
2 No need to use wrapper to interact with global objects to secure component
3 Improve Performance as it doesn't use secure wrapper
4 Better support of 3party javascript
5 Compatible with standard javascript as it evolves
https://developer.salesforce.com/docs/component-library/documentation/en/lwc/security_lwsec_locker_comparison
54
Owner Based Sharing Rule if Criteria is based on a queue?
Then it excludes the records owned by individuals in the queue, thus only share records owned by the queue. Therefore, need create a public group and use queue to contain it, and then use OBSR on this public group to share with same public group.
Or role as first option
55
How to get Question from Community to have faster response?
Enable 'Question-to-Case' in Support Setting
Moderators can use this 'Escalate to Case' action
56
Motivation mechanism on Community?
Enable gamification by setting up Recognition Badges and Reputation as well as leaderboard
57
SF JIT Controller Types?
Standard Controller (not apex). Can't handle duplication.
Customised Controller (Apex) Auth.SAMLJitHandler
58
SF Connect Limit
20k call out per hour and 100k records returned per hour
59
SF Notification Limit
10k per hour
60
The Tax ID for the dealership should only be visible to Channel Managers and their management chain and every effort must be made to prevent inadvertent access to the Tax ID
Use an encrypted field. Not enough information to recommend Platform Encryption though you can make that case if you feel that CB needs/desires key management. Make sure the candidate understands that you can can't include tax ID as part of a SOQL where clause. Field Level Security isn't good enough since value could be accidentally shown as a result of bad apex code
61
how to create custom Auth. provider
1 set up an app with third party
2 create custom metadata type to store third party attributes
3 builder Apex class (AuthProviderPluginClass) to implement a custom auth provider
4 configure the Auth. Provider as Custom authentication provider with reg handler class from the step 3
5 update the app to use the callback URL generated by SF
62
What Device Mobile publisher doesn't support?
Android tablet is not supported currently
63
Big object catches
1 Big objects support only object and field permissions.
2 Once you’ve deployed a big object, you can’t edit or delete the index. To change the index, start over with a new big object.
3 SOQL relationship queries are based on a lookup field from a big object to a standard or custom object in the select field list (not in filters or subqueries).
4 Big objects support custom Salesforce Lightning and Visualforce components rather than standard UI elements (home pages, detail pages, list views, and so on).
5 You can create up to 100 big objects per org. The limits for big object fields are similar to the limits on custom objects, and depend on your org’s license type.
6 Big objects don’t support transactions that include big objects, standard objects, and custom objects.
To support the scale of data in a big object, you can’t use triggers, flows, processes, and the Salesforce app.
64
Einstein Recommendation Builder
You can recommend anything (Recommended Items) to anyone (Recipients) by connecting two Salesforce objects. You can connect any two standard or custom Salesforce objects (including managed package objects).
65
with your one request being passed about to a multitude of processing consumers, how do we keep track of the transaction?
use a Correlation ID
66
Exceeding W2L limit solution?
Create LWC component and put it on any EC page that guest user can access. Ensure guest user profile has permission to create lead.
67
The allocation should happen based on the closest distance between the medical practitioner practice and the patient's address.
Apex BT; Location based SOQL to calculate then assign case lookup field
68
Difference between High Volume EO and EO?
1 can't write to High Volume EO as it doesn't have record ID generated by Salesforce
Access via Lightning Experience
Access via the Salesforce mobile app
Appearance in Recent Items lists
Record feeds
Reports and dashboards
Writable external objects
69
Distribute Mobile Publisher App process
1 Request a Salesforce managing package for the app
2 Install the Salesforce managed Package
3 Request a Beta version of your app
4 Submit app for review or make changes
70
How is Shield Platform Encryption different from the out-of-the-box Classic Encryption solution?
Classic Encryption only lets you protect a special type of custom text field, which you create for that purpose (example: SS#,PCI-DSS). Shield Platform Encryption allows you to encrypt a variety of widely-used standard fields, along with some custom fields and files/attachments. Classic Encrypted custom fields use AES-128 bit keys while Platform Encryption uses HSM-protected AES-256 bit keys to encrypt/decrypt customer's data.
71
Org strategy changes from Single org to multi-org, what need to be called out?
1 RH simplified, 2 LDV reduced 3, Governance, local COEs with central COP if the process are quite difference per org 4 security and visibility
72
For CC user to access the second master of a Junction object, they need be the owner of that record.
From Spring 22, CBSR can include records owned by CC users.
73
Account team on Person Account?
Yes, and it at least needs to be Partner license
74
TCRM Trending Limits?
1 Maximum number of trended datasets per user 5
2 Maximum number of rows per snapshot 100k
3 Maximum number of rows in the report to be trended 500,000 for admins, 100,000 for non-admins
4. Maximum total number of rows in a trended dataset 5 MM
5. Maximum monthly number of rows for all snapshots per org 40MM
5mil dataset, 40mil in a org. Doing trending within TCRM without using a report as source can overcome this. No row limit for TCRM
75
How does Marketing Cloud works with Multi Salesforce org scenario?
MC now can be upgraded to a Multi-Org account.
1. 1 BU connects to 1 SF Org, up to 5, otherwise performance degradation
2. Multi-BU can connect to same SF org, suitable for regions maintaining their own BUs in Single Org scenario
76
How sign request secures?
SF signs the sign request with client secrete and canvas app uses canvas sdk to verify.
77
what's the only way to restrict user record access?
OWD, now also with restriction rule
78
Profile object edit permission vs Sharing Rule Read/Write Vs Sharing Group Read/Write
If profile object access is read only, users can only read even if sharing rule or sharing group give them Write access.
If profile object access is Edit, users can only edit a record if sharing rule also has Read/Write access. However it can always edit the record owned by a community users even if sharing set via sharing group gives it Read access only.
79
How to use Restriction Rule?
1, for draft, unpublished records, use restriction rule with Public read only OWD for the external users who can only see published records.
2. It can even hide detail object record in a M-D relationship.
3. For standard object, only contract, task, event are supported
4. Five rules per object
80
Data Migration staging database
The end-to-end solution comprises the source system's databases, a staging database, and Salesforce. The staging database consists of two layers: the Transformation Layer and Target Layer.
• The Transformation layer is a set of intermediate database structures used for performing transformation and data quality rules. Only transformed and cleansed data will be loaded into the Target Layer.
• The Target Layer has tables structured identical to the Salesforce Objects—data types may differ depending on the database platform used.
• Data from the Target Layer will be loaded into Salesforce via Informatica cloud or any other ETL Cloud capable tool of choice.
Raw Schema -> Canonical Schema->Target Schema
81
Data migration Testing
Testing: Unit and Integration
1. Identify the appropriate load sequence. Consider relationships across all objects.
2. Run sample migration of a small subset of records from each legacy application; extract, transform, and load into SFDC.
3. Debug issues and update scripts as needed.
4. Run sample migration tests until they run clean with no errors.
Testing: Full Load and Performance Testing
1. Run full migration into sandbox. Full migration = extract, transform, and load all records.
2. Prepare reports on records in the source system or extracts, and the records loaded into Salesforce.com. Identify any missing data.
3. Fix issues and repeat until there are no errors.
4. Run full migration in a full sandbox environment.
5. Validate data from a technical and business perspective.
82
What needs to be configured on the Salesforce org in order for the external client application to integrate with Salesforce APIs? Is this configuration for outbound/inbound/bi-directional scenario?
a. A connected app needs to be configured in the Salesforce org.
b. A connected app is only for an inbound scenario from an external application into Salesforce.
83
How do we ensure access is only given for a limited period of time for the application?
Configure the Refresh Token Policy setting under the OAuth Policy for the Connected App.
84
Can we use SAML only for single-sign-on scenarios for the desktop client application in Salesforce? If not, why?
No. SAML is a browser-based protocol and requires a browser to facilitate the exchange of SAML tokens in order for the authentication to take place.
85
How UA flow is secured?
Access token is returned after a hash fragment and it's only sent to the callback URL defined in the connected app
86
Why is the My Domain configuration required for a SP Initiated SAML Flow?
By configuring a My Domain, admins enable the Force.com platform to recognize the org for which unauthenticated requests are intended, and perform customized behavior, such as redirecting to their Identity Provider through the retrieval of the Single Sign-On settings configuration of the Service Provider org. This would not have been possible if the login was done through a URL at login.salesforce.com as the application will only know which org you are trying to log in to only after the authentication happens. This is because login.salesforce.com is a generic login URL for all Salesforce orgs.
87
What is the role of the browser in the SSO flow?
The browser is used to facilitate the exchange of SAML tokens between the SP and the IdP.
88
How do we ensure that the browser knows how to redirect to the original requested resource?
This is achieved through the use of the RelayState parameter, which is passed via the browser as part of the SAML token exchange.
89
Mobile app
* If a solution without customers having to authenticate is required, then it’s possible to develop a Force.com Sites page (mobile Responsive) and allow customers to capture their support cases via that page. If the customer provides their email, then notification to the cases can be provided via email.
* Location Sharing: This can be enabled using the HTML geolocation feature where required.
• Uploading a Picture: The HTML media capture feature can be used in a hybrid or web app to enable the user to choose a picture on their phone to upload or to take a new picture.
90
How can I calculate the ROI for my campaigns?
The Campaign ROI Analysis Report is located on the Reports tab in the Campaign Reports folder. It calculates your campaigns' performance by return on investment (ROI) and average cost. For each campaign in the report:
ROI, which is expressed as a percentage, is calculated as the net gain (Value Won Opportunities in Campaign - Actual Cost) divided by the Actual Cost.
Value Won Opportunities in Campaign is the calculated amount of all closed or won opportunities where the campaign is the Primary Campaign Source on the opportunity.
91
How can I track which opportunities resulted from campaigns?
When you create an opportunity, you can fill in the Primary Campaign Source field to indicate that the opportunity resulted from a specific campaign.
In addition, when you convert a lead that is linked to a campaign, that campaign is automatically inserted into the opportunity Primary Campaign Source field.
If a lead or contact is linked to multiple campaigns, the campaign with which he or she is most recently associated is inserted into the opportunity Primary Campaign Source field.
The Opportunities related list on a campaign shows every opportunity that is linked to that campaign. You can also run the Campaign Revenue Report to track which opportunities are linked to your campaigns.
92
How is Campaign influence different from ROI reports?
Campaign influence tracks pipeline and revenue for multiple campaigns, and ties all campaigns of a contact role to that opportunity for pipeline and ROI reporting. This is especially helpful for longer deal cycles when more than one campaign contributes to a closed deal or a converted lead.
93
Omni channel supported objects?
Cases
Chats
Contact requests
SOS video calls
Social posts
Orders
Leads
Custom objects that don’t have a master object
94
Omni-channel External Routing Technical Architecture and Process
Salesforce sends events using Salesforce Streaming APIs for the PendingServiceRouting object.
Partner application creates a session to authenticate.
Partner application queries Salesforce for work details, agent availability, and more.
Partner application determines the routing decision.
AgentWork is created and pushed to the specified agent in Salesforce.
Step 1: Create a Routing Configuration and Queue for External Routing
Step 2: Create a PushTopic for PendingServiceRouting
Step 3: Listen to the PushTopic
Step 4: Create AgentWork
95
Omni-channel skill based routing set up?
Enable Skill Routing from Omni-Channel
Create Skills (Classic view)
Create Service Resource for agents with skills
Define Skills-Based Routing Rules
Enable Skills-Based Routing Rules from the Routing Configuration
96
Social Studio vs social customer service?
social customer service can set up two social accounts between FB and Twitter directly from Salesforce.
Social Studio is a full studio to also support Instgram and Youtube. End of life though (only internally)
97
Two type of knowlege article sharing?
data category or standard sharing rule (not friendly to CC user)
98
Federated Search
In Salesforce Setup, search for and open External Data Sources.
Click New External Data Source
Enter a name for the connectionThis is the name that appears on the search results tab in Salesforce for customers.
Select Federated Search: OpenSearch for the Type.
99
SF API Port
For security reasons, Salesforce restricts the outbound ports you can specify to one of the following:
80: This port only accepts HTTP connections.
443: This port only accepts HTTPS connections.
1024–66535 (inclusive): These ports accept HTTP or HTTPS connections.
8443: MA
100
Set up Custom Domain for community
1) Update your DNS Server With Your Custom Domain by using a Cname
2) Create a Certificate Signing Request & Obtain an SSL Certificate for your domain
3) Update your signed SSL certificate in Salesforce
4) Create a Custom Domain in Salesforce
101
CC license for Approval Process?
Can submit but not as an approver
102
App Whitelisting
to enable it, we have to contact support first. after that pre-authz has to be defined by admin
about key words - 'App Whitelisting'
https://help.salesforce.com/s/articleView?id=sf.security_api_access_control_all_users.htm&type=5
NOTE Salesforce creates connected apps for common Salesforce apps and automatically installs them in your org. It’s your responsibility to approve these connected apps and grant access to users.
no, they r not exclusive. API whitelisting blocks everyone from using unknown apps - users can't install any apps they wish. Admin must authorize the apps and grant it to sepcific users through profile or perm sets
if u don't enable API whitelisting, and just pre-authorize existing apps, then those users don't have to give consent when they use it. but, nothing stops those users or others from installing other apps.
103
Must Open CTI or SCV use Service Cloud license?
No.
104
Defence-in-depth (multiple levels of security) - sharing some notes
UI Layer
Login - Native, SSO, MFA
Session - IP range, Login Hours, PWD policy
Clickjack, CSP, Locker, XSS, XSRF
Business Layer
Apex WITH SHARING
SOQL with enforced security
SOQL Injection
Data Layer
Profile / Perm CRUD and FLS
OWD
Role-based Access -> RH, OBS, CBS, Teams, Apex/Manual Sharing
Platform Encryption
105
Mobile push notification registration flow
1 register from vendor, apple or google
2, store the registered credential in connected app which also enable mobile push
3, users who register the app will have a push token from apple/google which is uploaded into Salesforce associated with user record
4, it's called Mobile Push notification from user record
106
ESB vs API Gateway
API Gateway is used for managing the APIs (like securing, publishing, subscribing etc for end-to-end management of APIs)
ESB is Enterprise Service Bus - helpful in integrating multiple applications in different format through message transformation, routing etc.
107
Why Heroku?
Data replication --- Heroku Connect
Data proxies - Salesforce Connect (not Odata 4, only Read)
Custom user interfaces -Canvas, SF rest api
External processes - Function, call-out
108
Heroku Connect - Polling?
Standard Polling - 2 min - 60 mins, 1 min internal for adjustment
Accelerated Polling - polling on demand (Push Topic)
109
Heroku Connect - Write to Salesforce
When bi-directional (“read-write”) sync is configured, Heroku Connect writes changes to Salesforce using SOAP or Bulk API. These API calls don’t count towards your Salesforce API limit.
The Bulk API is optimized for operations that apply to larger datasets. It’s faster than using SOAP API in these scenarios. Connect automatically attempts to use the Bulk API when all the following conditions are met:
The connection is configured to use the Ordered Writes algorithm.
A unique identifier is specified for the mapping.
Between 2,000 and 10,000 contiguous changes of the same type (INSERT, UPDATE or DELETE) are made to a given object. For example, 5000 INSERTS into ‘Lead’ object.
The Salesforce API version for the connection is set to v39 or higher.
When writing changes for more than 10,000 records using the Bulk API, the records are processed in batches of 10,000.
Heroku Connect uses SOAP API for writing changes to your Salesforce organization when:
There are fewer than 2,000 records to be processed.
The conditions to use the Bulk API aren’t met.
Heroku Connect attempts to pack as many records as possible into a SOAP message, up to 200 records.
110
PushTopic?
A PushTopic is an sObject that contains the criteria of events you want to listen to, such as data changes for a particular object. You define the criteria as a SOQL query in the PushTopic and specify the record operations to notify on (create, update, delete, and undelete). In addition to event criteria, a PushTopic represents the channel that client apps subscribe to.
* support filtering (very unique feature)
* respect object, field, record sharing
* doesn't support shield encryption field
111
Push Topic -Field Notification Options?
All, reference (default), select, where
112
gap event and overflow event?
gap events instead of change events to inform subscribers about errors, or if it’s not possible to generate change events. A gap event contains information about the change in the header, such as the change type and record ID. It doesn’t include details about the change, such as record fields.
The conditions that cause gap events include:
The change event size exceeds the maximum 1 MB message size.
Some field type conversions of custom fields. For more information, see Conversions That Generate a Gap Event.
When an internal error occurs in Salesforce preventing the change event from being generated.
Changes that occur outside the application server transaction and are applied directly in the database. For example, archiving of activities or a data cleanup job in the database. To not miss these operations, gap events are generated to notify you about those changes.
The first 100,000 changes generate change events. The set of changes beyond that amount generates one overflow event for each entity type included in that set. An overflow event is generated when a single transaction contains more than 100,000 changes. An overflow event contains only header fields. The changeType field header value is GAP_OVERFLOW instead of the specific type of change. The object type corresponding to the change is in the entityName field. An overflow event doesn’t include details about the change, such as the record fields or record ID.
A record creation, deletion, or undeletion counts as one change toward the threshold. However, in a record update, each field change counts toward the overflow threshold. For example, if three field values are modified in one record update, they count as three operations against the overflow threshold.
113
Composite Resource
Composite, Composite Graph, Composite Batch, Sojbect Tree(Post, only for creation of nested object tree type records), Sobject Collection (GET, DELETE, PATCH, POST)
114
customer not see internal user interactions on application but can see the interactions they suppose to see.
chatter feed has option to select only post to internal users or all users with access.
115
broker referred application, 1 cus can have multiple, customer decide who can see their own referred related cases
Case -> application->broker account so sharing set
116
apex inbound email service. How does it work?
1, create apex class implement Messaging.InboundEmailHandler interface
2. create email service
3. All emails stored in InboundEmail Object
4 Add email addresses into this email service which receives emails from customer
117
Delivery Guarantee?
OBM but PE is ok. Ensure to mention the guarantee from ESB to target sys (like having a message queue to manage)
118
archived email and logs? MC, DWH, SF
migrated to DWH, then SF Connect
if viewing email sent via MC, MC connect does sync to SF but it's storage count. Can use LWC +API too.
If migrated email has attachement, need consider external storage solution as well. so DWH needs to have a field linked to it.
119
Email to Salesforce VS Apex email service
1 email 2 sf is for internal user to use to forward their emails sent from Outlook or Gmail to customers also to Salesforce so the email is associated as an activity. It's not for external users to send email back to SF org.
2 Apex email service is to process external inbound emails programmatically and you can set up a few email addresses exposed to customers so whatever emails sent to those mailboxes will trigger Apex email service.
120
When you insert an identical big object record with the same representation multiple times to Big Object what happens?
only a single record is created so that writes can be idempotent.
121
Async SOQL
The limit for Async SOQL queries is one concurrent query at a time.
Async SOQL is implemented via the Chatter REST API.
122
Account Data Sharing Rule for Person Account?
No
123
Data Model Key Considerations.
1 Individual Object is part of OWD, and has ownership
2 Product has no owner
3 CPQ quote and quote line also uses Product and Pricebook as normal, with a lookup to oppty
4 AccountTeam and OpportunityTeam are objects
5 ACR doesn't have owner field but AccountRelation does and it has OWD too
6 Consent related object don't have ownership but it has OWD
External license can only read PB and Product
Product can be used to model Individual Item such as rental car, scooter, apartment with lookup to Asset if owned by Landlord
Profile Edit permission can override Sharing Set Read Only access
Asset, Oppty, Case don't need have an Account association but Order does
124
If reporting requirement for customer is there but quite specific
use List view/Related List or a Custom LWC to display a dashboard
125
ETL - data source system has duplicates
Use Registration style, create a global ID, stamp it back to the source
126
LDV- if the object volume is huge needs archive but the data is needed for business processing,
Then use Big object if processing needs be done on platform
Or SF function if off platform but it requires cost
127
Restriction Rule Use case
It can be applied to any object incl. detail object. It has two steps.
1 Define the user group by either User record attribute or a Custom Permission
2 Define the allowed records with criteria set up. (Be ware that formula field can't be used as criteria).
Restriction Rule can be used for External Object too.
128
Service Agent Partners should only be able to see customers who have passed ID&V, and then only whilst they have open cases. SAPs should only be able to see the most recent 5 orders and 12 months of cases.
Account Relationship Data Sharing rule seems a good fit as it can have conditions when set-up whilst sharingset can't.
129
Universal Containers (UC) has a classified information system that its call center team uses only when they are working on a Case with a record type “Classified”. They are only allowed to access the system when they own an open “Classified” Case, and their access to the system is removed at all other times. They would like to implement SAML SSO eithER Salesforce as the Idp, and automatically allow or deny the staff’s access to the classified information system based on whether they currently own an open “Classified” Case record.
What is the recommended solution for automatically allowing or denying the access to the classified information system based on the open “Classified” Case record criteria?
Use Custom Connected App Handler to dynamically allow access to the system based on whether the staff owns any open “Classified” Cases.
130
License Choice
1 CC user can't be assigned a case owner so it implies CCP license; Try not give CC license to vendor, supplier scenario which has management hierarchy or mention some visibility in reporting section.
2 CRM analytics should be mentioned, maybe even mobile publisher
131
If governance part talks about recent security breach
Penetration testing to identify security flaws. Use tools like
CheckMarx or Sonarcube, Salesforce security scanner to review custom code. Security
assessment by an external vendor should be considered.
132
If a record is assigned to a queue as queue is the owner.
all members have access to this record
133
Clinical trial managers only have visibility to drugs after the development phase is complete and approved and only to those drugs that are assigned to them.
CBSR on Drug on Development phase, share with Clinical Trial Manager SVP role and subordinates, Read ; Restriction rule on Drug check assigned to = user.ID
134
DevOps in Multi Org
Better address the branching/repo/packages for multi-org in Presentation.
135
Sharing set gives access to master
then detail records can be accessed as long as profile allows
136
SF Standard Addresss fields
supported in Community. doees return lag, longi geo info from google. But it won't be as professional as QAS.
137
External Product from third party, if large
RR pattern with integration, customised ordering UI
138
How to not allow a public site accessible by public during testing phase but testing team
Guest profile can also set up IP range
139
How to allow partners to use their own IDP to access Partner community?
My own thoughts- use Okta as IDP to Partner Community, and then set up Enterprise IDPs in Okta with Routing rules to direct partner domains to each IDP. So establish a Chained SSO
140
Einstein Data Detect
A managed pkg to install.
create a data detect policy
scan
141
What is DMZ. How it works?
*DMZ* or *demilitarized zone* is a physical or logical subnetwork that contains and exposes an organization's external-facing services to an untrusted, usually larger, network such as the Internet. The purpose of a DMZ is to add an additional layer of security to an organization's local area network (LAN): an external network node can access only what is exposed in the DMZ, while the rest of the organization's network is firewalled
1 external firewall filters traffic coming in from external networks
2 internal firewar filters traffic between LAN and DMZ
142
Remember Restriction rule can apply to External Object
to add additional layer of filter. Cant use cross-org adapter or custom adapter. have additional system callout impact on search and changing the rule
143
Testing Automation
selenium scripts that will be initially created by testers during QA testing and those scripts will be hooked up to CICD pipelines to complete ongoing regression testing
144
thought process for a code refactoring process in an existing org
refactoring need to be driven by business values and technical considerations
identify the org object model, OWD, automation approaches - Config Vs Customisation
identify what config automation needs to change to code and vice versa.
use a new org to start replicating the data models and develop sth small. ….
145
Hub spoke orgs for SSO
hub org set as IDP
all spoke orgs set as SP orgs in SSO setting
in hub org set up Connected apps to define the connections to all those SP orgs
my domains need to enable accross all orgs
146
sell product which converts to an asset, same entitlment applies to all customers who purchases this. What function to use?
Entitlement template associated with product, asset associated with product so auto creates the entitlement by the template
Jakub states that it could just use case escalation rule if it’s standard across the business to save data on entitlement record.
147
How heroku connect works between a SF object and Heroku
Heroku has postgres DB
Heroku enables Heroku Connect Add-on
In heroku connect set up, connect to the salesforce instance and postgres DB
in heroku connect select the object that needs to be sync. HC can auto create the related table with the schema or manually created and map
select fields
set up sync timing in two ways
Don’t count as API call. Full sync can’t filter
148
what advantage of mobile SDK over custom integration solution
SDK provides authentication authorisation natively
Offline mobile sync (didn’t remember this term)
smart store encrypted db
all other mobile services
community support(need understand more)
push notification (need understand more)
149
Difference between EAC and Outlook/Gmail Integration.
The key difference between EAC and Outlook Integration when it comes to emails is that EAC will auto-sync emails, events, etc. Outlook Integration does NOT auto-sync.. the user would need to select the record that they want the email or event to be attached to in salesforce
EAC emails do not have full reporting functionality, but emails logged with Outlook Integration DO have full reporting functionality
EAC stores data on AWS with 24 months limit.
150
SF Data Archiving Best Practices
1 understand data growth 2 Establish Data Retention Policy, 3 Build Archiving Solution (Schedule in batch, keep parent/child structure, bypass automation not trigger sharing recalculation, hard delete option)
4 Testing it, 5 Ensure restoration
151
How to prevent External Users from the same Account to see each other's Contacts?
Uncheck the box in Community Settings "*Allow community users to see contacts that have not been enabled for communities"*
152
What is a XSS attack? How can it be prevented?
XSS - Cross Site Scripting which means user input is mixed with code to take control user information.
Can be prevented by:
- Use of standard components where possible
- Using HTMLENCODE, JSENCODE or URLENCODE to escape special chars
- Careful use of third party JS Libs
153
What is a SOQL-injection attack? How can it be prevented?
SOQL Injection is injecting user input to dynamic SOQL queries.
Mitigation:
- Avoid Dynamic Query where possible
- Use of bind variables
- Use of escapeSingelQuotes method if dynamic query needs to be used
154
What is Cross-Site Request Forgery attack? How can it be prevented?
Less of programming issue. This is related to to spoofing user with attackers JS,webpage where attackers can take control of user information.
Mitigation:
- Standard Controlers & methods implement Anti-CSRF
- From platform developments perspective, aovid DMLs in on load methods. User only query.
- Educate users to take extra care
155
What are the possible approaches to store PII?
- Use Salesforce Platform Encryption to encrypt the PII
- Use Crypto.Encrypt, Crypto.Decrypt based on AES256 Algo and Secret key in Custom Metadata
156
How does the OAuth User agent flow secure the AT.
The AT is passed as a hash fragment and not query parameter, so the AT is not sent to the server as part of URL redirect
Clear the browser history on device by calling JS replace function.
Callback URL in UA flow cannot be an HTTPS, it needs to be a custom protocol
157
How does SLO work?
Session INDEX (NOT ID) is stored at IdP and sent to SPs and RPs duing SSO.
If an SP initiates SLO, then it can post Session INDEX to the IdP SLO URL.
IdP will then inititate SLO with all other SPs or RPs connected to that user session.
After receiving responses from all SPs, IdP notfies the SP that initiated the SLO.
158
What is Reverse Proxy
A *reverse* proxy controls and monitors traffic from the internet that requires access to a server inside the customer’s firewall (we encounter this a lot with Salesforce)
Reverse proxy is used for *load balancing, security policies, caching* etc
*Common Use Cases* – customer exposes _delegated authentication endpoint_, web services, _outbound messaging endpoint_, _email relay_ etc. These are often actually reverse proxy endpoints, then routed internally to real destination
*Technologies* – Apache Http Server (mod_proxy), IBM Data Power etc
159
DMZ vs Reverse Proxy
Reverse proxy is usually hosted in DMZImagine a Museum that has 2 walls in front of it (external firewall and internal firewall) and a checkpoint post in between the wall. The area between the wall is DMZ. The checkpoint post is the Reverse proxyAnyone coming into the Museum needs to come thru the walls (DMZ) and thru the checkpoint. The checkpoint checks for identity (valid access token, MASSL etc) and then allows to enter the Museum.The checkpoint also ensures traffic control, so too many people dont enter the Museum
160
How to prevent clickjacking?
Prevent your pages to be hosted in IFRAMES on unknown sites. Setup -> Security -> Session Settings
Enabled by default for SF Setup Pages.
Enable it for Community. Different levels - Allow, External Domains whitelisted, Same origin, Don't Allow
161
What is CSP?
Content Security Policy - provides protection against Cross Site Scripting (XSS). Its a W3C standard that controls content loaded on pages. Content can be images, CSS, JavaScript.
162
What is DKIM
DKIM (Domain Keys Identified Mail) is an email authentication technique that allows the receiver to check that an email was indeed sent and authorized by the owner of that domain. This is done by giving the email a digital signature
163
What is Cross-Origin Resource Sharing (CORS)
*Cross-Origin Resource Sharing (CORS)* is a web standard for accessing web resources on different domains
For example, using CORS, JavaScript code at https://www.example.com could request a resource from https://www.salesforce.com.
To access supported Salesforce APIs, Apex REST resources, and Lightning Out from JavaScript code in a web browser, add the origin serving the code to a Salesforce CORS whitelist.
*Extras:*
Browser will make an automatic preflight request using the OPTIONS HTTP method. This call is used to determine the exact CORS capabilities of the server, which is in turn used to determine whether or not the intended CORS protocol is understood.
164
Difference between SAML Assertion flow and SAML bearer flow
SAML Bearer
- Requires Connected App where the cert if uploaded
- No IDP required, client can generate a SAML token, sign it and present to token endpoint for AT
- Use case - if client wants to use SAML in exchange for AT and SF does not have SAML SSO enabled
SAML Assertion
- No Connected App required
- SF uses SSO settings cert to validate the SAML token
- The SAML token is issued by IDP
- Use case - when client wants to reuse SAML token to get AT from SF for API access
165
How does selectiveness work and give an example.
Selectiveness means the filters used in the query are selective.
Standard Index is selective:
- <30% of first million records
- <15% of remaining records after first 1 million
- no more than 1 million of total records
Custom Index is selective:
- <10% of first million records
- <5% of remaining records after first 1 million
- no more than 333,333 of total records
166
What issues can be captured PMD and SonarCube?
Security issues like injection (SOQL, XSS),
Application and code inefficiencies like code not bulkified, queries/dml in loops, multiple triggers etc
OLD API version (Apex classes using very old versions)
Unused code - Classes, VF pages not used for long time
Fields not used
Test - coverage, failures, no asserts
Hardcoding
Duplication of code
167
What are the ways to secure OBMs?
4 levels of security
- IP login restrictions to Salesforce servers so you know request is coming from SF data centers
- Org ID check to know request is coming from specific SF org
- 2 way ssl to encrypt the message so that on one can tamper with the message
- Session ID check to know the user is allowed to send OBM
168
Multi security leaks in past and we need stop any report content to be downloaded. How can we control it
Export Reports disabled on profile
169
Can you add custom fields on AccountTeam or Oppty Team or Case Team?
Yes, we can add custom fields, validation rules and triggers on OpptyTeam and Account team. no customisation on Case teams
170
Adding Skinny Table, will it increase seach performance from global search?
No. Search and SOSL is done on different server and adding skinny table, indexes on data/table will not improve Search performance.
171
API gateway vs ESB
API gateway has security and throttling, mainly external facing where you restrict traffic coming from external systems
ESB allows controlled and highly structured integrations between systems, can orchestrate long running api callouts and with multiple systems, mainly internal systems
172
Can Partner/CCP users use Bulk API to load data into Salesforce?
No. Regardless of whether the “API Enabled” profile permission is granted, portal users (Customer Portal, Self-Service portal, and Partner Portal) can't access Bulk API.
173
When to use remote site setting over Named credentials
AJAX Proxy - https://developer.salesforce.com/docs/atlas.en-us.ajax.meta/ajax/sforce_api_ajax_proxy.htm
174
How do I allow a subset of users (admins) to login into Salesforce from login.salesforce.com when access via login.salesforce.com is not allowed
- Contact support to enable Delegated Authentication
- Once its enabled, then on profile/using permission uncheck "Is Single Sign-On Enabled" for admins and check it for all other users profiles
175
How heavy images can be rendered efficiently & Optimized on Community?
1. Use CDN which will faster delivery of static resources based on the geographic location of the user.
2. Enable Progressive Rendering and set the Display Priority of each component (images) to load at "High"/"Highest"/"Nuetral" pace
3. Make sure Browser Caching is enabled in Session Settings (default is enabled)
176
Large data migration considerations
Bulk API 2.0, Parallel loading, PK Chunking, Granular locking, Defer sharing calculation,
177
Prevent web to lead/case spam
Another suggestion would be to create a Validation Rule once a pattern is identified to stop the records from coming to the Org. A permanent solution would be to enforce a web-side validation or captcha to make sure that the web form is secure and protected from spam. Also, it'd be a best practice to try to avoid easily-accessible source code directly in your website. It's best practice to use other HTML/API methods instead in order to fully protect web submissions.
178
Can Lead be a Master object?
No
179
Approval process
Approval process can be automated via PB or Flow, prefer flow. However, if an Order or Oppty needs to enter AP based on total amount calculated from Order Product or Oppty Product, this flow needs to be triggered on the child object level by having a parent.amount formula field as a condition.
Approval process cannot submit to user themselves
Approval page layout cannot be customised such as override values etc. It can only be done via Visualforce customisation
Approval process for multi currency - need create AP for each currency because the entry criteria is fixed. May consider using Or condition if the currency type is small
180
Multiple User group access the same community
Consider Login methods - use VF + expID to control the display of login method
Welcome email needs to be turned off and instead use Flow to send email via customised VF email template
181
How to retrieve SF updated for last 24 hrs
SOAP get updates if volume is low
Data replication API
ETL
182
Customers should be able to save calendar invites of training sessions on their system’s local calendar app or mobile
intents in mobile
a calendar intent then u have an option to add to calendar directly or ask to add
similar to calling
if u click a link with phone no intent it makes call to that number
183
If customer’s smart watch or health band needs to sync with mobile app which sends the data to iot hub regularly. this must be bluetooth between smart watch and mobile?
3 ways either bluetooth/ wifi/ mobile
1 if bluetooth the data will be first transferred to mobile and from mobile to cloud
2 if wifi/mobile capable watches/bands can directly call the apis from watch/band to sync to cloud
184
Soap vs Bulk Api for data migration
1 SOAP API avoid record locking on parent objects of MD R/S
2 Bulk API may cause it
3 Bulk API allows multi attachments loaded from a single zip file
185
Sales reps are too busy to transcribe their meeting notes after a customer visit. They sometimes forget information that might help them with a sale.
Create a Quick Log a Call custom action. Default the date and the type of visit, and provide a Description field. Using their phone’s speech-to-text feature, users can dictate their notes into the Description field, which takes less than a minute. No typing required!
186
It’s a hassle for sales reps to access product datasheets. They have to look in a binder or call the office.
Create a dedicated Chatter group where the marketing team can post datasheets. Mobile users can easily view the most recent file from their phone.
187
Sales reps often don’t have time to call HQ and place an order right after a meeting. There’s a lag time between the customer’s order request and the order placement.
Create a custom action called Place an Order. The user completes a few required fields, and the update kicks off a workflow that sends an email to customer service. The email contains just enough information to get the order started. Now reps can place orders while they’re sitting in front of the customer.
188
External system maintain records sharing to Salesforce? How?
SOAP API to maintain Sobject_share records
189
How to gurantee Platform event publish?
pub/sub api provides aknowlegement
190
How to send invoice email with PDF?
MC can send it via a MC FTP for pdf and then use ampscript to attach
191
How to use JWT token from SF to ESB
Named credential storing JWT token format with link to private key, ESB will have a Token exchange to verify or use Java app to verify to grant access.
192
How to use JWT Token from SF to ETL?
U don't need to. It's the other way around from ETL to SF
193
If talking about scalability concern with testing
it's load testing
194
How Salesforce tackles GDPR compliance
SF is a processer, SF customer is data controller.
1, Consent Mgm objects, and Consent Capture pkgs which have flows to respect customer choices such as Right to Forget, build additional flows, Apex trigger on Individual object
1.1 Consent Event stream receive notifications about changes to consent fields or contact information on core objects.
2, Platform Encryption for data security, Event Monitorting for data breach, Field Audit history for data retention
3, identify lead, contact fields and categorise it as GDPR compliance in field configuration
4, Data residency - links to Org strategy
5, Marketing Cloud -- delete contacts if they require (MC connect), cloud page to capture.
6. SF Email, unsubscribe Footer
195
Data monetization?
Data monetization is the act of measuring the economic benefit of corporate data
196
Data obfuscation?
Process of converting original data with a modified content, such as protected PII data,
Two techniques: Pseudonymization and Anonymization. the latter means data is not identifiable, whilst the former can still identify the source data indirectly.
197
LDV Impact and Risk
Slow record CRUD operation
Slow down search
Slow down SOQL and SOSL queries
Slow Down list views, reports and dashboards
Impacts the data integration interfaces, performance of SF APIs
Longer to calculate sharing records
Higher chance of hitting governor limits
Slow down full data sandbox refresh
198
LDV mitigation tools
Data consumption analysis - SF calculates nightly the database stats
Query Optimiser
Bulk API
Batch Apex
Deferred Sharing
