Interview Question Set

Security Foundations Questions

Interview preparation for security, access, and governance topics that appear in admin, consultant, and architect roles.

Question

How would you explain the Salesforce security model in one clear structure?

I explain it as layered control: org-level security, object access, field access, and row-level visibility.

Question

When would you use restriction rules?

I would use restriction rules when users already have broad access from the main sharing model but still need narrower record visibility for a specific business boundary.

Question

Why are permission sets generally better than profile sprawl for exceptions?

Permission sets are better for exceptions because they let you add focused access without cloning baseline user profiles for every variation.