Selected CRT-450 Developers Questions Answers

Page: 10 / 12

Question 40

A Primaryid__c custom field exists on the candidate_ c custom object. The field is used to store each candidate's id number and is marked as Unique in the schema definition.

As part of a data enrichment process, Universal Containers has a CSV file that contains updated data for all candidates in the system. The file contains each Candidate's primary id as a data point. Universal Containers wants to upload this information into Salesforce, while ensuring all data rows are correctly mapped to a candidate in the system.

Which technique should the developer implement to streamline the data upload?

Options:

Create a before Insert trigger to correctly map the records.

Create a before save flow to correctly map the records.

Update the PrimaryId__ c field definition to mark it as an External Id.

Upload the CSV into a custom object related to Candidate__ c.

Question 41

What are two use cases for executing Anonymous Apex code?

Choose 2 answers

Options:

To run a batch Apex class to update all Contacts

To delete 15,000 inactive Accounts in a single transaction after a deployment

To add unit test code coverage to an org

To schedule an Apex class to run periodically

Question 42

Assuming that name is a String obtained by an tag on a Visualforce page, which two SOQL queries performed are safe from SOQL injection? Choose 2 answers

Options:

Option A

Option B

Option C

Option D

Answer:

A, C

Explanation:

Option A:

String query = 'SELECT Id FROM Account WHERE Name LIKE \'%' + String.escapeSingleQuotes(name) + '%\'';

List results = Database.query(query);

Explanation: This option uses String.escapeSingleQuotes(name) to sanitize the name variable. This method escapes any single quotes in the input, preventing malicious input from breaking out of the string context in the SOQL query.

[Reference: Salesforce Apex Developer Guide - Escaping Single Quotes, Why Safe: By escaping single quotes, it mitigates the risk of SOQL injection attacks that rely on manipulating string literals., , Option C:, , String query = '%' + name + '%';, List results = [SELECT Id FROM Account WHERE Name LIKE :name];, Explanation: This option uses a bind variable (:name) in the SOQL query. When variables are bound in this way, Salesforce automatically handles escaping and ensures that the input cannot alter the structure of the query., Reference: Salesforce Apex Developer Guide - Using Apex Variables in SOQL and SOSL Queries, Why Safe: Bind variables are the recommended way to include user input in SOQL queries safely, as they prevent injection by treating the input as a parameter rather than part of the query string., , Option B:, , String query = 'SELECT Id FROM Account WHERE Name LIKE \'%' + name.noQuotes() + '%\'';, List results = Database.query(query);, Explanation: The method noQuotes() does not exist in the Apex String class. Therefore, this code does not properly sanitize the name variable., Reference: Salesforce Apex Developer Guide - String Class Methods, Why Unsafe: Without proper sanitization, the name variable could contain malicious SOQL code, leading to injection vulnerabilities., , Option D:, , String query = 'SELECT Id FROM Account WHERE Name LIKE \'%' + name + '%\'';, List results = Database.query(query);, Explanation: This option directly concatenates the name variable into the query string without any form of sanitization or escaping., Reference: Salesforce Apex Developer Guide - SOQL Injection Overview, Why Unsafe: Direct concatenation of user input without sanitization leaves the application vulnerable to SOQL injection attacks., , Conclusion:, Safe Options: A and C are safe from SOQL injection because they properly handle user input through escaping and bind variables, respectively., Unsafe Options: B and D are unsafe as they do not adequately prevent SOQL injection., ]

Question 43

Universal Containers wants to back up all of the data and attachments in its Salesforce org once a month.

Which approach should a developer use to meet this requirement?