CRT-450 Exam Dumps - Salesforce Certified Platform Developer I (SU24)

Go to page:

<< First
Prev
1
2
3
4
5
6
7
Next
Last >>

Question # 4

Assuming that name is a String obtained by an tag on a Visualforce page, which two SOQL queries performed are safe from SOQL injection? Choose 2 answers

Option A

Option B

Option C

Option D

Full Access

Answer:

Explanation:

Option A:

String query = 'SELECT Id FROM Account WHERE Name LIKE \'%' + String.escapeSingleQuotes(name) + '%\'';

List results = Database.query(query);

Explanation: This option uses String.escapeSingleQuotes(name) to sanitize the name variable. This method escapes any single quotes in the input, preventing malicious input from breaking out of the string context in the SOQL query.

[Reference: Salesforce Apex Developer Guide - Escaping Single Quotes, Why Safe: By escaping single quotes, it mitigates the risk of SOQL injection attacks that rely on manipulating string literals., , Option C:, , String query = '%' + name + '%';, List results = [SELECT Id FROM Account WHERE Name LIKE :name];, Explanation: This option uses a bind variable (:name) in the SOQL query. When variables are bound in this way, Salesforce automatically handles escaping and ensures that the input cannot alter the structure of the query., Reference: Salesforce Apex Developer Guide - Using Apex Variables in SOQL and SOSL Queries, Why Safe: Bind variables are the recommended way to include user input in SOQL queries safely, as they prevent injection by treating the input as a parameter rather than part of the query string., , Option B:, , String query = 'SELECT Id FROM Account WHERE Name LIKE \'%' + name.noQuotes() + '%\'';, List results = Database.query(query);, Explanation: The method noQuotes() does not exist in the Apex String class. Therefore, this code does not properly sanitize the name variable., Reference: Salesforce Apex Developer Guide - String Class Methods, Why Unsafe: Without proper sanitization, the name variable could contain malicious SOQL code, leading to injection vulnerabilities., , Option D:, , String query = 'SELECT Id FROM Account WHERE Name LIKE \'%' + name + '%\'';, List results = Database.query(query);, Explanation: This option directly concatenates the name variable into the query string without any form of sanitization or escaping., Reference: Salesforce Apex Developer Guide - SOQL Injection Overview, Why Unsafe: Direct concatenation of user input without sanitization leaves the application vulnerable to SOQL injection attacks., , Conclusion:, Safe Options: A and C are safe from SOQL injection because they properly handle user input through escaping and bind variables, respectively., Unsafe Options: B and D are unsafe as they do not adequately prevent SOQL injection., ]

Question # 5

How does the Lightning Component framework help developers implement solutions faster?

By providing change history and version control

By providing an Agile process with default steps

By providing device-awareness for mobile and desktops

By providing code review standards and processes

Full Access

Question # 6

Which statement describes the execution order when triggers are associated to the same object and event?

Triggers are executed in the order they are modified.

Triggers are executed alphabetically by trigger name.

Triggers are executed in the order they are created.

Trigger execution order cannot be guaranteed.

Full Access

Question # 7

Universal Containers has developed custom Apex code and Lightning Components in a Sandbox environment. They need to deploy the code and associated configurations to the Production environment.

What is the recommended process for deploying the code and configurations to Production?

Use the Force.com IDE to deploy the Apex code and Lightning Components.

Use the Ant Migration Tool to deploy the Apex code and Lightning Components.

Use a change set to deploy the Apex code and Lightning Components.

Use Salesforce CLI to deploy the Apex code and Lightning Components.

Full Access

Question # 8

A software company is using Salesforce to track the companies they sell their software to in the Account object. They also use Salesforce to track bugs in their software with a custom object, Bug__c.

As part of a process improvement initiative, they want to be able to report on which companies have reported which bugs. Each company should be able to report multiple bugs and bugs can also be reported by multiple companies.

What is needed to allow this reporting?

Junction object between Bug_c and Account

Master-detail field on Bug__c to Account

Lookup field on sug_c to Account

Roll-up summary field of Bug__c on Account

Full Access