D2: Security

Test your architectural judgment on Security scenarios. Each question requires you to evaluate sharing models, identity architecture, encryption trade-offs, programmatic security, and cross-domain impacts.

Keyboard shortcuts: A-D or 1-4 to answer · Enter or Space to advance

Question 1 of 420 correct so far

A team builds a custom page for updating employee compensation. The Apex controller performs DML on a custom object. Which combination of security enforcement is most complete?

AMark the controller 'with sharing' and use WITH SECURITY_ENFORCED on all SOQL queriesBMark the controller 'with sharing' and use Database.update(records, AccessLevel.USER_MODE) for DMLCMark the controller 'without sharing' and use Security.stripInaccessible() before DMLDMark the controller 'with sharing', use WITH USER_MODE on SOQL, and use AccessLevel.USER_MODE on DML

Press A-D or 1-4 to answer

After the Quiz

Review incorrect answers carefully — the explanations reference exact exam concepts. Repeat the quiz until you score 80%+.

---

Always verify against official Salesforce documentation

This content is study material for CTA exam preparation. Content compiled and presented with AI assistance. Not affiliated with Salesforce.