• Cert++
  • Practice
  • Certle
  • Review
  • Tracks
  • Checklist
  • Guides
  • Upgrade
Cert++
  1. Home
  3. Platform Administrator II

Platform Administrator II

Checklist progress

0/215Learned

Platform Administrator II

Study Checklist

  • Platform Administrator
  • Platform App Builder
  • Platform Foundations
  • Platform Developer
  • Platform Administrator II
  • Agentforce Sales Consultant
  • Agentforce Service Consultant
  • Platform Data Architect
  • Platform Development Lifecycle and Deployment Architect
  • Platform Identity and Access Management Architect
  • Platform Integration Architect
  • Platform Sharing and Visibility Architect
  • Heroku Architect
  • B2C Solution Architect
  • Experience Cloud Consultant
  • Agentforce Field Service and Operations Consultant
  • Agentforce Nonprofit Consultant
  • Data 360 Consultant
  • Omnistudio Consultant
  • CRM Analytics and Einstein Discovery Consultant
  • Platform User Experience Designer
  • Platform Strategy Designer
  • B2C Commerce Developer
  • JavaScript Developer
  • Omnistudio Developer
  • Platform Developer II
  • Marketing Cloud Engagement Administrator
  • Marketing Cloud Engagement Specialist
  • Marketing Cloud Engagement Consultant
  • Agentforce Sales Foundations
  • Business Analyst
  • Marketing Cloud Engagement Developer
  • Marketing Cloud Engagement Foundations
  • Agentforce Specialist
  • Agentforce Life Sciences Consultant
  • B2B Commerce Administrator AP
  • B2B Commerce Developer AP
  • Agentforce Consumer Goods AP
  • Agentforce Financial Services AP
  • Agentforce Health AP
  • Agentforce Manufacturing AP
  • MuleSoft Integration Foundations
  • MuleSoft Developer
  • MuleSoft Developer II
  • MuleSoft Platform Integration Architect
  • MuleSoft Platform Architect
  • Tableau Desktop Foundations
  • Tableau Data Analyst
  • Tableau Consultant
  • Tableau Server Administrator
  • Tableau Architect

Checklist progress

0/215Learned

Given a scenario, determine the implications to record and field data access

0/13

  • Organization-wide defaults versus role hierarchy access
  • Field-level security versus page layout visibility
  • Grant Access Using Hierarchies on custom objects
  • Controlled by Parent access on child records
  • Sharing rules as additive record access
  • Owner-based versus criteria-based sharing rules
  • Manual sharing behavior on ownership transfer
  • Implicit sharing on parent-child records
  • Account team access versus consolidated record access
  • Report and dashboard folder sharing
  • Email template folder access
  • Territory Management default record access
  • Territory membership versus role hierarchy access

Compare and contrast the capabilities of custom profiles, permission sets, and delegated administration

0/8

  • Standard versus custom profile editability
  • Additive permission set grants versus profile baseline
  • When to use a permission set instead of a new profile
  • Profile-only settings versus permission set capabilities
  • Permission set groups for job functions
  • Session-based permission sets for temporary access
  • When to use delegated administration
  • Delegated administration capabilities and limits

Given a scenario, determine the implications of user authentication

0/13

Organization versus profile password policies

Learn this concept
Unseen

Organization versus profile login hours

Learn this concept
Unseen

Trusted IP ranges versus profile login IP ranges

Learn this concept
Unseen

Identity verification and device activation

Learn this concept
Unseen

Multi-factor authentication requirements

Learn this concept
Unseen

Session security and high-assurance sessions

Learn this concept
Unseen

My Domain login policies

Learn this concept
Unseen

Freezing versus deactivating a user

Learn this concept
Unseen

SAML single sign-on as service provider

Learn this concept
Unseen

Delegated authentication versus SAML

Learn this concept
Unseen

Social sign-on versus single sign-on

Learn this concept
Unseen

Login flows after authentication

Learn this concept
Unseen

Certificate-based user authentication

Learn this concept
Unseen

Compare and contrast the capabilities of a complex business model

0/8

  • Business accounts versus Person accounts
  • Person account enablement prerequisites
  • Business account to Person account conversion
  • Contacts to Multiple Accounts versus a single parent account
  • Contacts to Multiple Accounts setup
  • Direct versus indirect account-contact relationships
  • Contacts to Multiple Accounts considerations
  • Sharing implications of Person accounts and related contacts
  • Custom objects versus fields on standard objects
  • Master-detail versus lookup for object extension
  • Lookup field deletion behaviors
  • Converting master-detail relationships to lookups
  • Multilevel master-detail and subdetail records
  • Junction objects for many-to-many models
  • Junction object primary master and sharing
  • Related lists for related object data
  • Record types for picklists and business processes
  • Record type profile availability and defaults
  • Schema Builder for data model changes
  • Object Creator for extending objects
  • Lightning App Manager branding and navigation
  • Lightning page types in App Builder
  • Lightning App Builder versus page layout editor
  • Standard Lightning page components
  • Lightning page activation and assignment
  • Dynamic Forms versus Record Detail
  • Dynamic Forms migration and limitations
  • Dynamic related lists in Lightning App Builder
  • Lightning console apps versus standard apps
  • Lightning pages for console apps
  • Lightning page Analyze button
  • Setup Audit Trail for configuration change history
  • Debug logs for transaction and automation troubleshooting
  • Field data classification for compliance policies
  • Field Audit Trail for compliance retention
  • Shield Platform Encryption for data at rest
  • Deterministic versus probabilistic encryption
  • Platform Encryption key management
  • Sandbox data masking and anonymization
  • Data Mask masking types
  • Sandbox seeding versus full-copy masking
  • Security Health Check review and remediation
  • Reviewing effective user access
  • Release Updates affecting system access
  • Troubleshooting unexpected access from security settings
  • Products versus price books in the sales catalog
  • Standard Price Book versus custom price books
  • Opportunity price book and opportunity products
  • Quantity versus revenue product schedules
  • Quotes created from opportunities
  • Quote sync with opportunity products
  • Order Settings and enabling orders
  • Creating orders from quotes and opportunities
  • Activated orders versus reduction orders
  • Removing products and price books
  • Pipeline forecast types
  • Forecast categories and stage mapping
  • Forecast quotas, periods, and fiscal year
  • Forecasts hierarchy for role-based rollups
  • Manager judgments in pipeline forecasts
  • Pipeline forecast submissions
  • Territory types and hierarchy
  • Territory model states
  • Account assignment rules versus manual assignment
  • Opportunity assignment to territories
  • Territory hierarchy versus role hierarchy
  • Territory administration permissions
  • Role-based versus territory-based forecasts
  • Territory forecast manager assignment
  • Lightning Knowledge enablement
  • Lightning Knowledge user access
  • Knowledge article record types and page layouts
  • Data category groups and category hierarchy
  • Data category visibility
  • Knowledge article lifecycle
  • Knowledge article import
  • Entitlements versus entitlement processes versus milestones
  • Entitlement models for accounts, contacts, assets, and contracts
  • Entitlement Management enablement and lookup filters
  • Creating and maintaining entitlement records
  • Service contracts with related entitlements
  • Entitlement templates for products and assets
  • Entitlement process timelines, entry, and exit
  • Support milestones on entitlement processes
  • Milestone warning, violation, and success actions
  • Business hours in entitlement milestone timing
  • Case and work order movement through entitlement processes
  • Entitlement verification and Milestone Tracker on cases
  • Entitlement process versioning
  • Agentforce Service Console workspace
  • Case Feed actions for agent-customer communication
  • Chat and Enhanced Chat for customer conversations
  • Omni-Channel routing and agent capacity
  • Experience Cloud sites for customer self-service
  • Site Case Feed for Experience Cloud members
  • Sales, Service, Marketing, and Commerce product fit
  • Salesforce edition and suite implications
  • Salesforce Foundations bundled capabilities
  • Experience Cloud as a platform extension
  • Data quality assessment and management plans
  • Field data types for data quality
  • Picklist administration for data quality
  • Validation rules versus formula fields for data quality
  • Matching rules versus duplicate rules
  • Merging duplicate records
  • Duplicate jobs and duplicate record sets
  • Record data enrichment tools
  • In-org archival and mass delete
  • Custom report types versus standard report types
  • Cross filters versus field filters
  • Report bucket fields versus formula fields
  • Custom summary formulas versus row-level formulas
  • Complex report and dashboard charting
  • Joined reports versus a single report type
  • When to use reporting snapshots
  • Dashboard filters versus cloned dashboards
  • Dynamic dashboards versus specified running user
  • Data backup versus data archive
  • Native data export versus third-party backup
  • Data warehouses and data lakes for off-platform data
  • Big objects versus Salesforce Connect versus Heroku Connect
  • Salesforce Connect adapter selection
  • External lookup versus indirect lookup relationships
  • Salesforce Connect feature support and limitations
  • Data Import Wizard versus Data Loader
  • Data Import Wizard matching options
  • External ID matching for upserts
  • Relating imported records with External IDs
  • Sandbox types and what they copy from production
  • Sandbox refresh implications
  • Sandbox copy versus change set deployment
  • Managed versus unmanaged packages
  • Change sets versus packages for unrelated orgs
  • Deployment connections for change sets
  • Outbound versus inbound change sets
  • Permissions to upload and deploy change sets
  • Components available in change sets
  • Change set coverage for data and destructive changes
  • Dependent components in change sets
  • Profile settings and permission sets in change sets
  • Inbound change set validation versus deployment
  • Apex tests when deploying change sets
  • Flow versus Process Builder and Workflow Rules
  • Flow versus Apex for business automation
  • Screen Flow versus record-triggered Flow
  • Record-triggered versus scheduled Flow
  • Formula fields versus Flow
  • Formula fields combined with Flow
  • Approval processes versus Flow for record review
  • Classic approval processes versus Flow approvals
  • Approval processes combined with Flow
  • Flow Orchestration versus Flow Builder
  • Migrate to Flow versus rebuilding automation
  • Flow tests versus Flow Debugger
  • Flow fault paths and error emails
  • Monitoring flow and orchestration runs
  • Debug logs for declarative automation
  • Declarative automation that never ran
  • Delayed and waiting automation diagnosis
  • Process Builder and workflow failure diagnosis
  • Classic approval process troubleshooting
  • Flow approval process troubleshooting
  • Orchestration run details and debug modes
  • Screen flow input, navigation, and Lightning page placement
  • Before-save versus after-save record-triggered flow capabilities
  • Flow create update and delete versus Workflow and Process Builder
  • Scheduled paths versus time-dependent workflow actions
  • Workflow rule remaining actions and limitations
  • Classic approval process steps actions and record locking
  • Flow approval processes versus Classic approval processes
  • Flow interview bulkification and transaction limits
  • System validation versus custom validation in the save order
  • Before-save versus after-save record-triggered Flow timing
  • Duplicate-rule block actions versus later automation
  • Assignment and auto-response rules versus later automation
  • Record-triggered Flow trigger order on one object
  • Process Builder and after-save flows in the late save window
  • Workflow field updates re-entering the save order
  • Roll-up summary parent updates re-entering the save order
  • Approval field updates re-entering the save order
  • After-commit emails and scheduled paths versus in-save automation

Prepare for the Exam

Play Today's Certle
Back to track

Study Community

Ask questions and get the latest info from other Platform Administrator II studiers. 593 members and growing.

Go to Discord

SAML single sign-on as service provider

Explainer

Learn More

Practice Question

Keep going

Next conceptDelegated authentication versus SAML

Checklist progress

0/215 (0%)

0 of 215 concepts learned

Tip: You can filter concepts by status.

Prepare for the Exam

Play Today's Certle
Back to track

Study Community

Ask questions and get the latest info from other Platform Administrator II studiers. 593 members and growing.

Go to Discord

Explainer

When Salesforce is a SAML service provider, users sign in to the org or an Experience Cloud site with an external identity provider instead of a Salesforce password. Salesforce trusts a signed SAML assertion from that provider and opens a session, so authentication stays with the enterprise identity system. Administrators still control which login pages, sites, and first-login user creation apply after that assertion is accepted.

Core information
  • Salesforce as a SAML service provider (the relying party) lets users authenticate to Salesforce with credentials from an external identity provider, rather than with a local Salesforce password.
More details and nuances
  • Salesforce first looks for a signature on the SAML response body. If that signature is valid, the assertion is treated as signed; only if the response-body signature is missing or invalid does Salesforce look for a signature on the assertion. Salesforce recommends that the identity provider sign both the response body and the assertion.