Skip to content

Clouds, Products & Licensing: What Every CTA Must Know

Every Salesforce cloud, product, and platform capability is categorized here by how critical it is for the CTA Review Board. The categorization draws from the official CTA exam guide, 27+ publicly available mock scenarios, community accounts from CTAs who passed, and current (2025-2026) Salesforce platform documentation.

Click nodes to expand or collapse. Scroll to zoom. Drag to pan.


Tier 1: Must-Know Clouds and Products

These appear in virtually every CTA scenario. Deep architectural understanding, knowledge of their limits, and the ability to justify when and why to use each one are all expected.

Sales Cloud

Nearly every CTA scenario involves a sales process. Even scenarios focused on service or partner management include pipeline, forecasting, or territory requirements.

AspectWhat to Know
Core objectsLeads, Accounts, Contacts, Opportunities, Products, Price Books, Quotes
Key featuresTerritory Management (Enterprise vs. Original), Forecasting, Collaborative Forecasting, Lead Assignment Rules, Web-to-Lead, Sales Path, Sales Engagement
AutomationOpportunity Splits, Big Deal Alerts, Forecast Categories, Lead Scoring
Limits15 territory models (1 active), 500 assignment rules per object, Forecast Hierarchy tied to Role Hierarchy
LicensingRequires Salesforce or Sales Cloud user license; Enterprise ($175/user/mo), Unlimited ($350/user/mo)
Integration pointsERP (order-to-cash), CPQ tools, marketing automation, territory data from external systems
CTA scenario patternsMulti-region sales teams, channel/partner sales, complex pricing, M&A consolidation of sales processes

Review Board Pattern

Judges frequently ask about Territory Management: why Enterprise Territory Management over the original model, and how territories interact with the sharing model and forecasting. Know the architectural implications of each choice.

Service Cloud

Customer service requirements appear in the vast majority of scenarios. Self-service portals, case management, and omnichannel routing are common requirements.

AspectWhat to Know
Core objectsCases, Entitlements, Service Contracts, Knowledge Articles, Milestones
Key featuresOmni-Channel Routing (queue-based, skills-based), Case Assignment Rules, Escalation Rules, Knowledge Base, Macros, Service Console
Advanced featuresEntitlement Processes, Milestone Tracking, Service-Level Agreements (SLA enforcement), Messaging for In-App and Web (MIAW)
Limits3,000 assignment rules, 5 active escalation rules per object, Knowledge article types and data categories
LicensingService Cloud user license; same tier pricing as Sales Cloud
Integration pointsCTI (telephony), chat/messaging platforms, knowledge systems, field service dispatch, customer portals
CTA scenario patternsMulti-channel support, SLA management, knowledge-centered service, tiered support models, self-service deflection

Live Agent Retired

Live Agent (also known as Legacy Chat / Service Chat) was retired on February 14, 2026. The replacement is Enhanced Chat (formerly Messaging for In-App and Web / MIAW) for human-agent chat scenarios. For AI-assisted chat, add Agentforce Service Agent (the renamed Einstein Service Agent). An AI agent is optional. Enhanced Chat supports human-only routing without Agentforce (formerly Einstein Copilot).

Architectural Decision

A common CTA question is when to use Omni-Channel Skills-Based Routing versus Queue-Based Routing. Skills-based routing provides more granular agent matching but adds configuration complexity. Your choice should be justified by the scenario’s support model complexity.

Experience Cloud (Communities)

Experience Cloud (formerly Community Cloud) appears in the majority of CTA scenarios. External user access (customer portals, partner portals, dealer networks, self-service) is a recurring theme that touches security, licensing, data access, and identity.

AspectWhat to Know
Site typesCustomer Service (self-service), Partner Central (channel management), custom (LWC/Aura-based)
Key featuresTemplates, Guest User access, Content Management, Moderation, Reputation, Topics, Delegated Administration
Security modelExternal sharing model (separate OWD for external users), Sharing Sets, Sharing Groups, External Role Hierarchy
AuthenticationSocial Sign-On, SAML SSO, custom login flows, self-registration, passwordless login
Limits100 active sites per org, Guest User profile restrictions (post-Spring ‘20 security hardening), limited standard object access on lower-tier licenses
License typesCustomer Community, Customer Community Plus, Partner Community, External Apps, Channel - see Experience Cloud Licenses below
Integration pointsCMS, identity providers, external content, headless Experience Cloud via APIs
CTA scenario patternsPartner/dealer portals with shared Opportunities, customer self-service with case creation, multi-tier community access, B2B2C models

Critical for CTA

Experience Cloud licensing is one of the most common areas where CTA candidates lose points. You MUST know the difference between Customer Community and Customer Community Plus licenses (role-based sharing, standard object access, reporting capabilities), and you must be able to calculate cost trade-offs between member-based and login-based licensing. See Experience Cloud Licenses for the full breakdown.

Core Platform (Salesforce Platform)

The platform itself underpins everything. Every CTA scenario requires demonstrated understanding of platform capabilities, limits, and constraints. This is not a “product” to recommend; it is the foundation every recommendation sits on.

Capability AreaWhat to Know
Metadata-driven architectureMulti-tenant model, governor limits rationale, metadata API, Tooling API
Declarative automationFlow (Record-Triggered, Screen, Scheduled, Platform Event-Triggered, Autolaunched), Flow Orchestrator, Approval Processes
ProgrammaticApex (triggers, batch, queueable, schedulable, future), LWC, Aura, Visualforce, Apex REST/SOAP
Data platformSOQL/SOSL, Big Objects, External Objects, Platform Events, Change Data Capture, Custom Metadata Types
SecurityProfiles, Permission Sets, Permission Set Groups, OWD, Role Hierarchy, Sharing Rules, Criteria-Based Sharing, Apex Managed Sharing
IdentitySSO (SAML, OAuth), Connected Apps, Named Credentials, Auth Providers, My Domain, Login Flows
APIsREST, SOAP, Bulk, Streaming, Metadata, Tooling, Composite, GraphQL
LimitsSee Governor Limits Every CTA Must Know

Tier 2: Frequently Tested Products

These products appear in many CTA scenarios but not every one. Know when to recommend them, their trade-offs, and viable alternatives.

Marketing Cloud (SFMC)

When to recommend: The scenario describes mass email campaigns (exceeding Salesforce limits of 5,000 daily mass emails), journey orchestration across channels (email + SMS + push + ads), or sophisticated segmentation/personalization needs.

AspectDetails
Core capabilitiesEmail Studio, Journey Builder, Automation Studio, Mobile Studio, Content Builder
Legacy capabilityAdvertising Studio (retiring August 15, 2026 - replaced by Data Cloud Ad Audiences)
ArchitectureSeparate platform from core Salesforce - different data model, separate login, Marketing Cloud Connector for sync
Key limitationNOT native to the Salesforce platform; requires Marketing Cloud Connector or API integration to sync data
Integration patternMarketing Cloud Connector syncs Contacts/Leads/custom objects bidirectionally; API for real-time triggers
When NOT to recommendSimple email needs (use Salesforce native email), single-channel marketing, budget-constrained orgs
AlternativesSalesforce native email, Pardot/Marketing Cloud Account Engagement (B2B), third-party SMTP integration, Mailchimp

Advertising Studio Retiring

Marketing Cloud Advertising Studio is retiring August 15, 2026. For advertising use cases, use Data Cloud Ad Audiences instead.

CTA Scenario Approach

If a scenario mentions “mass communications” or “email campaigns beyond current limits,” do not jump straight to Marketing Cloud. Acknowledge it as an option, but also propose lighter alternatives (integrated SMTP, Account Engagement for B2B). Judges want to see that cost and complexity trade-offs were considered.

Data 360 (formerly Data Cloud)

When to recommend: The scenario requires Customer 360 unification across multiple data sources, real-time segmentation, identity resolution across systems, or a unified data layer for AI/analytics.

AspectDetails
Core capabilitiesData ingestion, identity resolution, unified profiles, segmentation, activation, calculated insights
ArchitectureRuns on Salesforce infrastructure with its own data model (Data Model Objects / DMOs); zero-copy federation with Snowflake, Databricks, BigQuery, Redshift
Key 2025-2026 updatesRenamed to “Data 360” at Dreamforce 2025; now the core intelligence layer for Agentforce; Tableau Semantics integration; AI-driven governance
Multi-org implicationsCan connect up to 5 Salesforce Core orgs and 1 Marketing Cloud org per Data Cloud instance - important constraint for multi-org strategies
When NOT to recommendSimple single-org setups with no external data unification needs; budget constraints (consumes credits)
AlternativesMDM tools, custom integration layer, ETL-based data warehouse

Emerging Capability

Data 360 (formerly Data Cloud) is the fastest-evolving part of the Salesforce platform. As of 2025-2026, it is increasingly central to Salesforce’s strategy, powering Agentforce, Tableau, and cross-cloud analytics. CTA candidates should understand its architectural role even when not recommending it in every scenario.

MuleSoft

When to recommend: The scenario describes complex enterprise integration landscapes with many systems (ERP, HRIS, billing, legacy), API lifecycle management requirements, or the need for a reusable integration layer (API-led connectivity).

AspectDetails
Core capabilitiesAnypoint Platform, API Manager, Runtime Manager, Design Center, Anypoint Exchange, CloudHub/Runtime Fabric
Architecture patternAPI-led connectivity: System APIs -> Process APIs -> Experience APIs
Key strengthEnterprise-grade iPaaS; manages the full API lifecycle; reusable integration assets; supports any-to-any integration (not just Salesforce)
Licensing modelSeparate from Salesforce licensing; priced by vCore and API call volume
When NOT to recommendSimple point-to-point integrations, small number of systems, budget constraints, when native Salesforce integration (APIs, Platform Events, Salesforce Connect) suffices
AlternativesNative Salesforce APIs + Named Credentials, Salesforce Connect (OData), Informatica, Dell Boomi, Workato, custom middleware

CTA Decision Framework

The question judges will ask: “Why MuleSoft and not native Salesforce integration?” The answer must show that native options were evaluated first (Platform Events, Change Data Capture, REST APIs, Salesforce Connect) and that MuleSoft’s additional cost and complexity are justified by the scenario’s integration complexity, system count, reusability requirements, and API governance needs.

Heroku

When to recommend: The scenario requires custom application logic that cannot run on the Salesforce platform due to governor limits, language requirements (Node.js, Python, Java, Ruby), consumer-facing web applications with high traffic, or heavy computational processing.

AspectDetails
Core capabilitiesPaaS for custom apps, Heroku Connect (bidirectional Salesforce sync), Heroku Postgres, Heroku Redis, add-on ecosystem
Key strengthNo governor limits; any programming language; scales horizontally; Heroku Connect provides near-real-time Salesforce data sync
Pricing modelDyno-based (compute) + add-ons; Heroku Connect pricing based on record count synced
When NOT to recommendWhen the workload can run on Salesforce (Apex, Flow, LWC); when MuleSoft already handles the integration layer; when the org prefers AWS/Azure/GCP directly
AlternativesAWS Lambda + API Gateway, Azure Functions, custom apps on any cloud provider, Salesforce Functions (retired Jan 2025 - use AWS Lambda, Azure Functions, or external compute services)
Integration patternHeroku Connect for data sync, REST APIs for real-time, Platform Events for event-driven

Heroku Enterprise End-of-Sale (February 2026)

Heroku Enterprise entered end-of-sale in February 2026 and operates under a sustaining engineering model. New Enterprise Account contracts are no longer offered, though existing subscriptions continue. Feature releases are limited to sustaining-engineering priorities. Existing customers retain access and renewals, but for new greenfield designs, prefer MuleSoft, Data Cloud, or custom API integration on AWS/Azure/GCP. Understand Heroku Connect as an architectural pattern for CTA scenarios involving existing deployments.

Heroku vs. MuleSoft

A frequent CTA question: “When would you use Heroku versus MuleSoft?” MuleSoft connects systems (integration middleware, API management). Heroku runs applications (custom compute, custom UI, processing). They are complementary, not competing. For high-volume data synchronization, compare Heroku Connect (priced per record count) against MuleSoft Anypoint Connector (priced per API call/vCore) based on the scenario’s data volumes.

Tableau / CRM Analytics

When to recommend: The scenario requires analytics beyond native Salesforce reports and dashboards: cross-system data visualization, predictive analytics, embedded analytics, or executive dashboards aggregating data from multiple sources.

ToolBest ForKey Consideration
Salesforce Reports & DashboardsOperational reporting on CRM data; users who live in SalesforceFree with CRM license; limited to Salesforce data; max 2,000 report rows displayed
CRM Analytics (formerly Tableau CRM)Advanced analytics embedded inside Salesforce; AI-powered predictions on CRM dataRequires CRM Analytics license; deeply integrated with Salesforce UI; limited to Salesforce ecosystem data
TableauEnterprise BI across all data sources; power users and data analystsSeparate platform; connects to any data source; requires Tableau license; steeper learning curve

CTA Reporting Strategy

When a scenario mentions “executive dashboards” or “cross-system reporting,” propose a tiered approach: native Reports & Dashboards for operational users, CRM Analytics (formerly Tableau CRM) for embedded Salesforce analytics, and Tableau for cross-enterprise BI. Judges value seeing you match the reporting tool to the user persona and data source.


Tier 3: Awareness-Level Products

Deep expertise in these products is not required for the CTA exam. Know what they do, when an architect would consider them, and their high-level trade-offs. If you recommend one in your solution, judges will probe your understanding.

Commerce Cloud

  • What it does: B2C and B2B ecommerce storefronts
  • CTA relevance: Appears in retail/ecommerce scenarios; most CTA scenarios do NOT require it
  • Key knowledge: Separate platform (B2C Commerce was Demandware acquisition); B2B Commerce runs on core Salesforce platform; different data models and integration patterns for each
  • Architect consideration: If the scenario mentions online storefronts or order management, acknowledge Commerce Cloud but evaluate whether the complexity is warranted versus simpler solutions

Industries Clouds (Financial Services, Health, Manufacturing, etc.)

  • What they do: Pre-built data models, processes, and UIs for specific verticals
  • CTA relevance: Rarely required in CTA scenarios; scenarios are industry-agnostic by design
  • Key knowledge: Built on core platform with industry-specific managed packages; introduce additional objects and automation; licensing is additive
  • Architect consideration: Only recommend if the scenario explicitly describes industry-specific requirements that align perfectly with an Industries Cloud’s pre-built capabilities

CPQ (Configure, Price, Quote)

CPQ End of Sale

Salesforce CPQ reached end of sale in March 2025. The successor product is Agentforce Revenue Management (formerly Revenue Cloud). There is no automated upgrade path - migrating from CPQ requires a full rebuild on the new platform.

  • What it does: Complex product configuration, pricing rules, guided selling, quote generation
  • CTA relevance: Occasionally appears in scenarios with complex pricing; not a core CTA topic
  • Key knowledge: Runs on core platform as a managed package; introduces its own object model (Quote Lines, Price Rules, Product Rules); has its own governor-like limits; requires CPQ license. Reached end of sale March 2025; successor is Agentforce Revenue Management
  • Architect consideration: For existing CPQ implementations, plan migration to Agentforce Revenue Management. For new implementations, recommend Agentforce Revenue Management directly

Field Service (Lightning)

  • What it does: Mobile workforce management, scheduling, dispatch, work orders
  • CTA relevance: Appears in scenarios with mobile field workers; understand at a conceptual level
  • Key knowledge: Built on Service Cloud; introduces Work Orders, Service Appointments, Service Territories, Scheduling Optimization; requires Field Service license
  • Architect consideration: Key for scenarios with technicians, inspectors, or field-based service delivery; offline mobile capability is a differentiator

Slack

  • What it does: Team collaboration, channels, workflows, integration hub
  • CTA relevance: Low direct relevance but increasingly part of Salesforce ecosystem
  • Key knowledge: Slack-to-Salesforce integration via Slack Connect, Workflow Builder, Salesforce for Slack app
  • Architect consideration: Mention as a collaboration layer if the scenario emphasizes cross-team communication or real-time notifications

Platform Capabilities Every CTA Must Master

These core platform features cut across every scenario and every domain. Weakness in any of them will be caught during Q&A.

Automation: Flow and Process Automation

Routes an automation requirement through complexity, trigger type, and declarative sufficiency checks to the correct Flow type, Flow Orchestrator, or Apex solution.
Figure 1. Automation tool selection: start with complexity and trigger type, then escalate to Flow Orchestrator for multi-stage processes or Apex when declarative capability runs out.
CapabilityWhen to UseKey Limits
Record-Triggered FlowAutomate on record create/update/deleteNo hard element cap (API v57.0+); constrained by CPU time limits; watch for recursive triggers
Screen FlowGuided user input, wizards, multi-step formsSubject to same transaction limits as any flow
Scheduled FlowBatch processing, timed actions250,000 records per batch; 24-hour minimum interval
Platform Event-Triggered FlowReact to event bus messagesSeparate transaction from publishing context
Flow OrchestratorMulti-step, multi-user business processesSteps run in separate transactions; supports parallel stages
Approval ProcessesStructured approval chains30 steps per process; limited conditional logic
Apex TriggersComplex logic beyond declarative capabilityAll governor limits apply; order of execution matters

Anti-Pattern

Do NOT recommend publishing Platform Events from Flow solely to trigger another Flow in the same org for orchestration purposes. This is a documented anti-pattern. Use subflows or Flow Orchestrator instead. Judges will call this out.

Event-Driven Architecture: Platform Events and Change Data Capture

FeaturePurposeKey Characteristics
Platform EventsCustom event messaging (pub/sub)Define custom event schema; publish from Apex, Flow, API; subscribe via triggers, Flow, CometD/Pub/Sub API; replay up to 72 hours
Change Data Capture (CDC)Broadcast record changes to subscribersAutomatically publishes changes for selected objects; subscribers receive create/update/delete/undelete events; uses the same event bus
Pub/Sub APIgRPC-based event subscription (replaces CometD)Higher throughput; supports both Platform Events and CDC; recommended for new implementations

Architect Decision

Platform Events are for custom business events (“Order Shipped,” “Approval Completed”). CDC is for replicating data changes to external systems. Do not use CDC as a substitute for integration middleware. It broadcasts all changes, which can create high message volumes that external systems must filter.

Governor Limits Every CTA Must Know

Memorizing every number is not required. Understanding the categories, why they exist (multi-tenant fairness), and how they influence architecture decisions is what matters.

Limit CategoryKey NumbersArchitectural Impact
SOQL queries100 per synchronous transaction; 200 per asyncDrives bulkification patterns; influences data model (denormalization vs. normalization)
DML statements150 per transactionLimits cascading updates; influences trigger design
Heap size6 MB sync; 12 MB asyncConstrains in-memory processing; drives batch Apex for large datasets
CPU time10,000 ms sync; 60,000 ms asyncComplex calculations may need async processing or external compute offload
Callouts100 per transaction; 120-second timeoutInfluences integration pattern (sync vs. async); drives use of queueable chaining
API daily limitsBased on edition and license count (Enterprise: 100,000 base + per-license)Drives decisions about integration frequency, batch vs. real-time, Bulk API usage
Bulk API15,000 batches/24hr; 10,000 records per batch (Bulk 2.0 handles this automatically)Critical for data migration and high-volume integrations
StorageData storage per license (varies by edition); File storage (10 GB org + per-license)Drives archival strategy, LDV decisions, external storage for files
Custom objects200 (Enterprise); 2,000 (Unlimited/Performance)Influences managed package considerations and data model complexity
Sharing rules300 total per object (up to 50 criteria-based; no separate ownership-based sub-limit)Influences sharing model design; may require Apex Managed Sharing for complex needs

Sharing Model and Record-Level Security

Judges probe sharing deeply. Designing a complete sharing model for a complex scenario is expected.

Starting from OWD, the flow branches to role hierarchy, sharing rules, manual sharing, Apex Managed Sharing, and external sharing sets depending on access requirements.
Figure 2. Sharing model design: set OWD to the most restrictive default, then progressively open access through role hierarchy, sharing rules, and Apex Managed Sharing based on who needs to see which records.

Key concepts a CTA must articulate:

  • OWD (Organization-Wide Defaults): Start here. Set the most restrictive default, then open up.
  • Role Hierarchy: Opens access upward. Understand the “Grant Access Using Hierarchies” toggle.
  • Sharing Rules: Owner-based (up to 300) and Criteria-based (up to 300 per object). Know the performance implications at scale.
  • Apex Managed Sharing: For sharing logic too complex for declarative rules. Understand the __share object and rowCause.
  • External sharing model: Separate OWD for external users. Sharing Sets for Experience Cloud users without roles. Sharing Groups.
  • Implicit sharing: Account-contact, parent-child, portal user access patterns.
  • Performance at scale: Large numbers of sharing rules or Apex Managed Sharing records slow record access calculation. Know the “group maintenance” implications.

Identity, SSO, and Access Management

CapabilityUse CaseProtocol
SAML SSOEnterprise SSO with corporate IdP (Okta, Azure AD, ADFS)SAML 2.0
OAuth 2.0API authentication, connected app authorizationOAuth 2.0 (multiple flows: Web Server, JWT Bearer, Device, Refresh Token)
OpenID ConnectSocial login, external identity providerOIDC
Named CredentialsSecure callout authentication (no hardcoded creds)Supports OAuth, JWT, password, AWS Signature
Connected AppsGovern API access, SSO entry points, manage policiesOAuth + SAML
My DomainCustom login URL, SSO prerequisite, identity managementN/A
Login FlowsCustom logic during authentication (MFA, T&C acceptance, data collection)Flow
Just-In-Time (JIT) ProvisioningAuto-create/update users at login via SAML attributesSAML
Multi-Factor Authentication (MFA)Required for all direct UI logins since Feb 2022TOTP, WebAuthn, Salesforce Authenticator

Identity is Make-or-Break

Identity and SSO is one of the most common domains where CTA candidates fail. End-to-end identity solutions must span internal users (corporate SSO), external users (community login), system-to-system authentication (Named Credentials + OAuth), and cross-org trust. Draw the identity flow showing every hop, token exchange, and trust boundary.

Shield Platform Encryption

ComponentPurposeKey Consideration
Platform EncryptionEncrypt data at rest (fields, files, attachments)Deterministic vs. probabilistic encryption; impacts filter/search/sort; BYOK (Bring Your Own Key) supported
Field Audit TrailRetain field history beyond 18-24 month standard limitUp to 10 years; archive policies; storage implications
Event MonitoringTrack user activity (logins, API calls, report exports, data exports)50+ event types; 1-year retention with paid license; NOT a system of record
Data DetectScan for sensitive data patterns (SSN, credit cards)Classification policies; scanning scope

When to Recommend Shield

Shield is required when the scenario mentions regulatory compliance (HIPAA, PCI-DSS, GDPR encryption requirements), audit trail obligations, or monitoring requirements for sensitive data access. Know the performance trade-offs. Platform Encryption can degrade search, sort, and filter capabilities on encrypted fields.

Multi-Org vs. Single-Org Strategy

CTA Domain 1, Objective 1.3. A significant architectural decision in any scenario.

FactorSingle-Org FavoredMulti-Org Favored
Business process commonalityHigh commonality across BUsDistinct processes, low overlap
Data sharing needsUsers need cross-BU visibilityData must be isolated (regulatory, competitive)
Governance modelCentralized IT, strong CoEDecentralized, BU autonomy prioritized
Release cadenceUnified release cycle acceptableBUs need independent deployment schedules
Compliance/data residencySingle jurisdiction or no restrictionsMultiple jurisdictions with strict data residency
Acquisition modelOrganic growthFrequent M&A with integration timelines
Customization divergenceManageable via config (record types, page layouts)Fundamentally different object models or automation
ScaleWithin platform limitsNear platform limits on storage, objects, or sharing rules

Modern consideration (2025-2026): Data Cloud / Data 360 can connect up to 5 Salesforce Core orgs, creating a unified data layer across a multi-org landscape. This shifts the trade-off: multi-org strategies become more viable when Data Cloud bridges the data silos. Data Cloud does add cost and complexity that must be justified.

CTA Default Position

Default to single-org unless the scenario presents compelling reasons for multi-org. Judges expect you to articulate the trade-offs. Common reasons for multi-org: data residency laws, fundamentally incompatible business processes, M&A with independent timelines, or platform limit constraints.


New and Evolving Capabilities (2024-2026)

CTA scenarios evolve with the platform. These features may not yet be heavily tested but demonstrate forward-looking architectural thinking.

Agentforce

Salesforce’s autonomous AI agent platform, succeeding Einstein Copilot.

AspectDetails
What it doesAutonomous AI agents that reason through multi-step tasks: analyze data, plan actions, execute workflows
ArchitectureTopics (defining what an agent can do, max 10-15 per agent), Actions (max 15 per topic), Atlas Reasoning Engine
Data foundationRequires clean, structured data; grounded via Data Cloud / Data 360; supports RAG with external data via External Objects in Prompt Builder
GovernanceEinstein Trust Layer for data protection; GDPR compliance; guard rails on agent actions
TestingAgentforce Testing Center for validating agent responses and performance
LicensingPer-conversation pricing model; separate from standard CRM licenses
CTA relevanceEmerging area; demonstrates awareness of platform direction. If a scenario mentions AI-assisted service or automated workflows, acknowledge Agentforce as an option with appropriate guardrails

Hyperforce

Salesforce’s re-architecture to run on public cloud infrastructure (AWS, GCP, Azure).

AspectDetails
What it doesEnables data residency by running Salesforce in specific cloud regions
Coverage38+ regions globally; 90% of customers have migration access as of 2025
CTA relevanceCritical for scenarios with data residency requirements (GDPR, data sovereignty laws). When a scenario mentions “data must reside in EU/APAC/specific country,” Hyperforce is the architectural answer
Key constraintNot all features are available in all Hyperforce regions immediately; verify feature parity

Well-Architected Framework

Salesforce’s prescriptive architectural guidance, relaunched at Dreamforce 2025.

Three pillars:

  • Trusted: Secure, Compliant, Reliable
  • Easy: Intentional, Automated, Engaging
  • Adaptable: Resilient, Composable

CTA Alignment

Frame review board solutions using Well-Architected language. When judges ask “why did you make this choice?” anchor the answer in these pillars. “I chose this approach because it is more adaptable, the composable architecture allows the client to evolve without rearchitecting” is stronger than listing features.

Other Notable Changes (2024-2026)

  • Flow Orchestrator GA: Multi-step, multi-user processes with stages, steps, and SLA tracking
  • Dynamic Forms/Actions GA: Record page customization without Visualforce
  • Pub/Sub API: gRPC-based replacement for CometD streaming with higher throughput for event-driven integration
  • External Services enhancements: Register external REST APIs declaratively for use in Flow
  • Data 360 Logging: Offload Flow execution logs to Data Cloud for observability at scale
  • Debug logs during deployment: Now default to “off” for performance, controlled via enableDebugLogsDuringDeployment in ApexSettings
  • GraphQL API: Targeted, efficient data queries that reduce API consumption vs. REST
  • Einstein Trust Layer: Governs LLM data access, masks PII, enforces zero-retention for prompts

Licensing Deep Dive

Understanding licensing is Domain 1, Objective 1.5. Judges expect you to recommend the correct license mix with cost awareness.

Full CRM Licenses

LicenseAccessUse CaseApproximate Cost
Sales CloudFull CRM + Sales features (Leads, Opportunities, Forecasting, Territory Mgmt)Sales reps, sales managers$175-$550/user/mo
Service CloudFull CRM + Service features (Cases, Entitlements, Omni-Channel, Knowledge)Support agents, service managers$175-$550/user/mo
Sales + ServiceCombined Sales and Service functionalityUsers who do both sales and supportBundled pricing

Editions determine feature ceiling: Enterprise, Unlimited, Einstein 1 (formerly Unlimited+).

Platform Licenses

LicenseObject AccessUse CaseApproximate Cost
Salesforce Platform Starter10 custom objects; NO standard CRM objects (no Leads, Opportunities, Cases, Campaigns)Simple custom apps, internal tools, HR workflows~$25/user/mo
Salesforce Platform Plus110 custom objects; NO standard CRM objectsComplex custom apps, operations dashboards~$100/user/mo
Salesforce Platform LoginSame as Platform; pay-per-login (50 credits/login)Infrequent internal app usersPer-login pricing

Common CTA Mistake

Platform licenses do NOT include access to Leads, Opportunities, Cases, Forecasting, or other standard CRM objects. If a user needs to view Opportunities (even read-only), they need a full CRM license, not a Platform license. Candidates frequently lose points by assigning Platform licenses to users who need CRM object access.

Experience Cloud Licenses

LicenseObject AccessRoles & SharingReportsBest For
Customer CommunityAccounts, Contacts, Cases, custom objects; NO Opportunities, CampaignsNO role hierarchy; Sharing Sets onlyLimitedHigh-volume self-service portals
Customer Community PlusAll standard + custom objects including OpportunitiesFull role hierarchy; standard sharing rulesFull reportingPortals needing role-based access and visibility
Partner CommunityAll standard + custom objects; Lead/Opportunity managementFull role hierarchy; partner-specific sharingFull reporting; delegated adminChannel/partner management with deal registration
External AppsCustom objects only (no standard CRM objects)ConfigurableLimitedCustom portal applications, authenticated sites
ChannelSimilar to Partner Community with channel-specific featuresFull role hierarchyFullReseller/distributor/dealer networks

Pricing models:

ModelHow It WorksWhen to Use
Member-based (named user)Fixed monthly per user ($5-$35/user/mo depending on license type)Users who log in frequently (more than ~4x/month)
Login-basedPer 24-hour login session (~$2/session)Users who log in infrequently; large user bases with low engagement

CTA License Calculation

In the review board presentation, show a license summary table. Example: “1,500 internal sales users (Sales Cloud Enterprise), 200 service agents (Service Cloud Enterprise), 50 IT/ops users (Platform Plus), 10,000 customers (Customer Community login-based), 500 partners (Partner Community member-based).” This demonstrates cost awareness and appropriate license selection.

Identity Licenses

LicensePurposeKey Capability
Identity OnlySSO access without CRM licenseAuthenticate via Salesforce for access to other apps (Salesforce as IdP); no CRM data access
External IdentityExternal user self-registration and authenticationSelf-service registration, profile management, social login; no CRM object access; cheapest external license

Other License Types

License TypeDescriptionExample
Feature LicensesEnable specific features for users who already have a base licenseMarketing User, Flow User, Knowledge User, Service Cloud User
Permission Set LicensesUnlock specific permission sets that require a paid add-onCRM Analytics, Sales Engagement, Pardot, Einstein features
Chatter FreeChatter collaboration only (feeds, groups, files); no CRM accessCompany-wide collaboration for non-CRM users
Chatter ExternalChatter access for people outside the organizationCustomer or partner collaboration in Chatter groups
Integration UserAPI-only license for system-to-system integrations, introduced Spring ‘23; 5 free per Enterprise/Unlimited org, additional at ~$10 eachSystem-to-system API integration users
Einstein Agent (Agentforce)Dedicated license for AI agentsAgentforce autonomous agent deployments; per-conversation pricing

Integration User License

The Integration User license is not deprecated. Introduced in Spring ‘23, each Enterprise/Unlimited org receives 5 free Integration User licenses. These are API-only licenses designed for system-to-system integrations. Additional licenses cost approximately $10/user/month. Use these instead of consuming a full Salesforce license for integration users.


What NOT to Focus On

These products or features rarely appear in CTA scenarios or are too specialized for the review board:

AreaWhy You Can DeprioritizeWhat to Know Instead
Industries Cloud deep dives (Financial Services Cloud, Health Cloud, Manufacturing Cloud specifics)CTA scenarios are industry-agnostic; you will not be asked FSC-specific questionsKnow they exist, that they add industry data models as managed packages, and their licensing implications
CPQ internal mechanics (product rule syntax, pricing waterfall details)Too specialized; tested in B2B Solution Architect cert, not CTAKnow that CPQ (SBQQ) is end-of-sale March 2025. For new designs, recommend Agentforce Revenue Management. For existing CPQ deployments, know its managed-package footprint and governor limit implications
Pardot / Marketing Cloud Account Engagement internalsSpecialized B2B marketing tool; rarely the focus of CTA scenariosKnow it exists as the B2B marketing option, how it syncs with Salesforce (connector vs. native), and when to recommend it vs. SFMC
Salesforce FunctionsRetired January 2025 (purchase cutoff October 2023); replaced by external compute servicesRecommend AWS Lambda, Azure Functions, or similar for compute needs beyond platform limits
IoT Cloud / IoT ExplorerDiscontinued; capabilities absorbed into Platform Events and Data CloudUse Platform Events for device data ingestion; Data Cloud for IoT data aggregation
QuipRetiring (subscriptions non-renewable after March 2027). Replaced by Slack Canvases and native Salesforce collaborationMention Slack for collaboration needs; Quip is not architecturally significant
Specific AppExchange packagesCTA tests architectural judgment, not product-specific knowledgeKnow the build-vs-buy framework: when to use AppExchange, evaluation criteria (managed package governor limits, namespace, ISV support model), and the trade-off between control and speed
Einstein feature-by-feature details (Einstein Lead Scoring algorithm, Einstein Opportunity Insights tuning)Too granular; CTA tests strategic AI positioningKnow when AI adds value, the data quality prerequisites, and the Trust Layer governance model
Visualforce deep developmentLegacy technology; CTA expects LWC-first approachKnow Visualforce exists for legacy migration scenarios; recommend LWC for new development; know the security differences (Lightning Locker vs. LWS)

Study Priority

The CTA exam tests breadth of architectural thinking, not depth in any single product. Speaking knowledgeably about any Salesforce product for 2-3 minutes is expected, but configuring CPQ pricing rules or writing Marketing Cloud AMPscript is not. Focus deep study on the platform itself: sharing model, governor limits, identity, data modeling, integration patterns, and automation.


Cross-Reference Map

Related study areas:


Sources

Personal study notes for the Salesforce CTA exam. Content compiled from VJ's study notes, official Salesforce documentation, community sources, and online publicly available content, then organized and presented with AI assistance. Not affiliated with Salesforce. © 2025–2026 VJ Srivastava.