Salesforce Certified Platform App Builder — Question 391

Universal Containers allows all employees to submit reviews for leadership using a custom object called Review. These Reviews should only be visible to the HR department and the employee who submitted the record.

Which three steps should an app builder take to properly control access to Reviews? (Choose three.)

Answer options

• A. Create a criteria-based Sharing Rule for the HR Department.
• B. Add a Master-Detail(User) field on the Review object.
• C. Disable Grant Access Using Hierarchies.
• D. Remove Review Read permission from non-HR Department user Profiles.
• E. Set organization-wide default to Private.

Correct answer: A, C, E

Explanation

The correct answer includes creating a criteria-based Sharing Rule for the HR Department to manage access, disabling Grant Access Using Hierarchies to ensure that hierarchy does not override sharing settings, and setting the organization-wide default to Private to restrict access. Options B and D do not address the requirement for controlled visibility since a Master-Detail field does not directly manage record access, and simply removing permissions does not provide a comprehensive access control solution.