How would you make sure Visualforce page is security proof? Choose 3 answers

• A. Manually check for sql injection
• B. Submit to force security scanner
• C. Use debug to check hijacked requests
• D. Use web application tool for security
• E. Manually check for cross site

Universal Containers has implemented a community for its customers using the Customer Community sense type. They have implemented a custom object to store service requests that has a look up to the account record.
The Organization Wide Default External Access for the service request object is set to Private. Universal Containers wants their customers to be able to see service requests for their account through the community Customers should not see service requests for other accounts. What Salesforce feature can the Architect use to implement this?

• A. Use a Sharing Set to share service requests related to the account based on the community user's profile.
• B. Use Apex Managed Sharing to share service requests related to the account to the appropriate community users.
• C. Use manual sharing to share the service requests manually when a new community user is added.
• D. Use a Sharing Rule to share service requests to the community user based on their role.

UniversalContainers(UC)hasimplementedcustomercommunitywithcustomercommunitylicenses for their customers. UCrequested thatanyrecord owned by its customers should be accessible byUC users in the customer support role.
How can an Architect configure the system to support the requirements?

• A. Sharing Set
• B. Share Group
• C. Apex Sharing
• D. Sharing Rule

What should the Architect do to ensure Field-Level Security is enforced on a custom Visualforce page using the Standard Lead Controller?

• A. Use the Schema.SObject.Lead.isAccessible() method.
• B. Use the {!Schema.sObjectType.Lead.fields.isAccessible()} expression
• C. Use the "With Sharing" keyword on the Standard Lead Controller.
• D. Nothing; Field-Level Security will automatically be enforced.

Universal Container has developed a custom Visualforce page that will accept user input and must prefer returning the results to the users.
Which two techniques should be used to ensure the users cannot perform a SOQL injection attack?

• A. Use the with Sharing keyword on the controller.
• B. Escape double quotes in the user input.
• C. Use bind variable in the SOQL query.
• D. Use the escapesinglequotes() method to sanitize user input.