Question bank
Salesforce Certified Advanced Administrator
42 Salesforce Certified Advanced Administrator questions with the correct answer and a written explanation, organised across 8 exam domains.
- 42 questions
- 8 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Analytics & Reporting
4 questions in this domain
- Question 1Single Choice
In the AppExchange ecosystem, what is the primary purpose of a managed package that vendors release?
- AProviding freely modifiable source code
- BCreating static org templates
- CDistributing protected, upgradeable codeCorrect answer
- DReplacing all custom metadata
Why this is the answer
Managed packages allow vendors to distribute updates while protecting source code and letting customers customize supported metadata without breaking upgrades.
- Question 2Multiple Select
Which factors should an Advanced Administrator evaluate when assessing the security posture of a third-party AppExchange solution?
- AOAuth scopes requestedCorrect answer
- BNumber of Salesforce users
- CData encryption standardsCorrect answer
- DCompliance certificationsCorrect answer
Why this is the answer
Security reviews focus on encryption, OAuth scopes, and certifications. A user count is not a security posture attribute.
- Question 3Interactive
Review the Apex trigger snippet. What is the primary scalability risk when this code runs on large data volumes?
- AAsynchronous processing will scale without limits
- BSynchronous execution nearing governor limitsCorrect answer
- CTriggers have no governor limits
- DNo DML means no performance risk
Why this is the answer
This trigger runs synchronously in the transaction and counts against governor limits, so it is a scalability concern as data volumes grow.
- Question 4Single Choice
While reviewing a third-party solution's integration method, what matters most for maintaining data integrity across systems?
- ANumber of APIs
- BHow data is synchronized and errors handledCorrect answer
- CCost per API call
- DPoint-to-point connection
Why this is the answer
Data integrity is preserved through robust synchronization, error handling, and a clear single source of truth, not API count or call cost.
AppExchange
2 questions in this domain
- Question 5Single Choice
What is a defining characteristic of a managed package in the AppExchange ecosystem?
- AVendors can push updates without impacting the customer's ability to customize certain metadata.Correct answer
- BIt becomes a static template that the vendor can no longer update.
- CIt requires the customer to manually reinstall the package after every release.
- DIt removes all customer control over the package's metadata.
Why this is the answer
Managed packages allow vendors to release updates while still permitting customers to customize specific metadata. Unmanaged packages, in contrast, are essentially templates that become part of the org and increase long-term maintenance responsibilities.
- Question 6Multiple Select
Which two factors should an Advanced Administrator evaluate before installing an AppExchange solution?
- AThe solution's security posture and compliance certifications.Correct answer
- BTotal cost of ownership, including implementation and migration costs.Correct answer
- CThe feature list alone as the primary decision driver.
- DThe solution's compatibility with the default Salesforce color palette.
Why this is the answer
Evaluating an AppExchange solution requires reviewing security and compliance, as well as total cost of ownership. Relying only on features is known as the Feature Trap, and visual branding is not a relevant technical evaluation criterion.
Configuration & Setup
8 questions in this domain
- Question 7Single Choice
What is the primary difference between managed and unmanaged packages when installed in the AppExchange ecosystem?
- AVendors can update it without destroying customer customizations.Correct answer
- BIt cannot be modified by the customer ever.
- CIt remains fully editable source code.
- DIt never requires vendor updates.
Why this is the answer
Managed packages allow vendors to push updates while customers keep certain customizations; unmanaged packages become static, customer-owned templates.
- Question 8Multiple Select
Which areas should an Advanced Administrator review when assessing a solution's security and compliance posture?
- AData encryption standardsCorrect answer
- BOAuth scopesCorrect answer
- CCompliance certifications such as SOC2 or HIPAACorrect answer
- DThe color scheme of the user interface
Why this is the answer
Security reviews must inspect encryption, OAuth scopes, and compliance certifications. User interface styling is not a security consideration.
- Question 9Interactive
The code block lists OAuth scopes requested by a Connected App. Which scope should be removed to align with least privilege?
- AfullCorrect answer
- Bapi
- Cemail
- Dprofile
Why this is the answer
The 'full' scope grants broad access to Salesforce data, violating least privilege; only the necessary scopes should be kept.
- Question 10Single Choice
What is the primary risk of choosing an unmanaged package when frequent vendor updates are required?
- AA massive maintenance burdenCorrect answer
- BAutomatic loss of custom objects
- CImmediate license expiration
- DCloud-based backup failure
Why this is the answer
An unmanaged package becomes part of the customer's org, so applying frequent vendor updates manually creates a significant maintenance burden.
- Question 11Multiple Select
Which items should be included when calculating the total cost of ownership for a third-party AppExchange solution?
- AImplementation and training costsCorrect answer
- BSpecialized administration effortCorrect answer
- CImpact on storage limitsCorrect answer
- DThe vendor's logo design
Why this is the answer
TCO calculations include implementation, training, specialized administration, storage impact, and long-term migration costs, not branding elements.
- Question 12Interactive
The code block demonstrates a processing pattern for an external integration. What type of processing is shown?
- ASynchronous trigger processingCorrect answer
- BAsynchronous queueable processing
- CScheduled batch processing
- DPlatform event streaming
Why this is the answer
The code shows a synchronous callout inside a trigger, which can consume limits and reduce scalability. Asynchronous processing is often preferred.
- Question 13Single Choice
What does the 'Feature Trap' refer to when evaluating AppExchange solutions for a new org?
- AChoosing based on features and ignoring integration needsCorrect answer
- BChoosing the lowest-priced solution
- CPicking an app with the fewest features
- DSelecting a package with no updates
Why this is the answer
The Feature Trap is selecting a solution solely for its feature list while ignoring how it interacts with existing custom objects and automation.
- Question 14Multiple Select
Which common mistakes can occur during AppExchange package installation and setup in a Salesforce environment?
- AAssuming automatic compatibility with triggers and validation rulesCorrect answer
- BConfusing configuration ability with source-code modificationCorrect answer
- CForgetting to assign licenses after installationCorrect answer
- DReviewing OAuth scopes before integration
Why this is the answer
Common traps include assuming compatibility, confusing configuration with code modification, and forgetting license assignment. Reviewing OAuth scopes is a recommended practice.
Data Management
4 questions in this domain
- Question 15Single Choice
What is the fundamental difference between managed and unmanaged packages on the AppExchange?
- AManaged packages allow vendors to push updates while preserving customer customizations; unmanaged packages become part of the org and increase maintenance.Correct answer
- BUnmanaged packages are encrypted and require no maintenance; managed packages are always open source.
- CManaged packages cannot be customized by customers; unmanaged packages allow full vendor updates automatically.
- DUnmanaged packages are automatically upgraded by Salesforce; managed packages require manual customer upgrades.
Why this is the answer
Managed packages enable vendors to release updates without destroying customer metadata, whereas unmanaged packages are templates that become part of the org and create long-term maintenance responsibilities.
- Question 16Multiple Select
Which aspects should be scrutinized during a security and compliance assessment of an AppExchange solution? Select all that apply.
- AData encryption standardsCorrect answer
- BOAuth scopes and access permissionsCorrect answer
- CCompliance certifications such as SOC2 or HIPAACorrect answer
- DThe number of end users in the customer org
Why this is the answer
A security and compliance assessment should cover encryption standards, OAuth scopes, and certifications such as SOC2 or HIPAA. The number of end users is not part of this assessment.
- Question 17Interactive
Review the requested scopes in the provided configuration. Which security best practice is being violated?
- ALeast privilegeCorrect answer
- BSingle sign-on
- CData residency
- DLicense assignment
Why this is the answer
The app requests full access to all data, which goes beyond the minimum necessary access and violates the principle of least privilege.
- Question 18Single Choice
What is the 'Feature Trap' when evaluating an AppExchange solution?
- ASelecting a solution only because of its feature list without checking its impact on existing custom objects or automation.Correct answer
- BChoosing an unmanaged package that becomes difficult to maintain.
- CAssuming all features work with every Salesforce governor limit.
- DFocusing only on the subscription price of a tool.
Why this is the answer
The Feature Trap is choosing an app based purely on its features without considering its interaction with existing custom objects or automation.
Object Manager & Lightning Apps
8 questions in this domain
- Question 19Single Choice
In the context of Salesforce packaging, what key difference distinguishes a managed package from an unmanaged package?
- AVendor can push updates without breaking customizationsCorrect answer
- BUnmanaged packages support vendor-controlled updates
- CManaged packages become part of the customer org
- DUnmanaged packages preserve all custom metadata
Why this is the answer
Managed packages allow vendor updates while preserving customer customizations; unmanaged packages become part of the org and increase maintenance responsibilities.
- Question 20Multiple Select
When evaluating Salesforce package types, which two true statements describe the nature and long-term impact of unmanaged packages?
- ABecome part of the customer orgCorrect answer
- BIncrease long-term maintenance responsibilitiesCorrect answer
- CProvide vendor-managed update paths
- DPrevent all customer customizations
Why this is the answer
Unmanaged packages become part of the customer org, so they increase maintenance responsibilities and lack vendor-controlled upgrades.
- Question 21Interactive
Review the Apex trigger snippet. Which scalability concern should you associate with this synchronous processing approach?
- AMay consume DML and CPU limitsCorrect answer
- BAvoids all governor limits
- CHas no effect on performance
- DEliminates the need for asynchronous code
Why this is the answer
Performing synchronous DML in a loop can consume DML and CPU governor limits; asynchronous processing is more scalable for growing data volumes.
- Question 22Single Choice
During an AppExchange solution evaluation, which security-related aspect should an advanced administrator carefully examine before approving the app?
- AData encryption and OAuth scopesCorrect answer
- BFeature list only
- CVendor office location
- DNumber of end users
Why this is the answer
Security assessment should focus on encryption standards, OAuth scopes, and compliance certifications like SOC2 and HIPAA.
- Question 23Multiple Select
Which two elements should be included when evaluating the security and compliance posture of an AppExchange solution?
- AData encryption standardsCorrect answer
- BOAuth scopesCorrect answer
- CPrice per user
- DLogo and branding
Why this is the answer
Encryption standards and OAuth scopes are key security and compliance factors; pricing and branding are not part of this evaluation.
- Question 24Interactive
Review the Connected App configuration and identify the security principle violated by its broad OAuth scope request.
- APrinciple of least privilegeCorrect answer
- BSingle sign-on
- CData residency
- DManaged package updates
Why this is the answer
Requesting broad scopes such as full and refresh_token violates least privilege; access should be limited to required objects and fields.
- Question 25Single Choice
In an AppExchange evaluation, what does the feature trap refer to and why is it a common mistake?
- AChoosing based on features aloneCorrect answer
- BChoosing based on total cost
- CChoosing based on security
- DChoosing based on vendor size
Why this is the answer
The feature trap is selecting a solution only for its feature list while ignoring interactions with existing custom objects and automation.
- Question 26Multiple Select
Which two common traps should you avoid when adopting an AppExchange package in your Salesforce org?
- AAssuming compatibility with custom triggersCorrect answer
- BConfusing configuration with source-code modificationCorrect answer
- CUsing permission sets for package access
- DReviewing requested OAuth scopes
Why this is the answer
Common traps include assuming compatibility with existing custom triggers and confusing configuring a package with modifying its source code.
Productivity & Collaboration
3 questions in this domain
- Question 27Single Choice
What is the fundamental distinction between managed and unmanaged packages in the AppExchange ecosystem?
- AManaged packages can be edited directly by the installer; unmanaged packages remain independent of the org.
- BManaged packages allow vendors to push upgrades while customers retain flexibility to customize certain metadata; unmanaged packages merge into the org and become the customer's responsibility.Correct answer
- CManaged packages are only available to Salesforce ISV partners; unmanaged packages are available to any admin.
- DManaged packages do not count against data storage limits; unmanaged packages consume storage.
Why this is the answer
Managed packages are versioned and upgradeable, allowing the vendor to release code updates without taking over all customer customizations. Unmanaged packages become part of the org and are the customer's responsibility to maintain.
- Question 28Multiple Select
When evaluating a third-party AppExchange solution, which two factors directly relate to the principle of least privilege?
- AOAuth scopesCorrect answer
- BRequested permissions on Salesforce objects and fieldsCorrect answer
- CVisualforce page styling
- DPackage version number
Why this is the answer
Least privilege means the app should only request access needed to function. OAuth scopes define broad capabilities, while object and field permissions control specific data access.
- Question 29Interactive
In the code block, which requested OAuth scope gives the app the broadest access and violates least privilege?
- Aopenid
- Brefresh_token
- Capi
- DfullCorrect answer
Why this is the answer
The 'full' scope grants full access to the org, far beyond least privilege. Scopes such as 'openid', 'refresh_token', and 'api' are commonly needed but should still be evaluated against the app's actual requirements.
User Management
6 questions in this domain
- Question 30Single Choice
What is the key difference between managed and unmanaged packages in AppExchange?
- AManaged packages allow vendors to update code without preventing customers from customizing certain metadata; unmanaged packages become part of the org and add maintenance responsibility.Correct answer
- BManaged packages are fully customizable at source-code level; unmanaged packages are code-locked.
- CBoth package types are maintained by the vendor, so there is no maintenance impact on the customer.
- DUnmanaged packages allow vendor updates without touching customer data; managed packages require manual migration.
Why this is the answer
Managed packages support vendor updates while permitting selected customer customizations, whereas unmanaged packages are copied into the org and require the customer to maintain them.
- Question 31Multiple Select
Which evaluation areas are part of a security and compliance assessment for a third-party AppExchange solution? Select all that apply.
- AData encryption standardsCorrect answer
- BOAuth scopesCorrect answer
- CApp listing popularity
- DCompliance certifications such as SOC2 and HIPAACorrect answer
Why this is the answer
A security and compliance assessment includes data encryption standards, OAuth scopes, and compliance certifications such as SOC2 or HIPAA, but not the app listing popularity.
- Question 32Interactive
Review the Apex trigger snippet in the code block. Which AppExchange evaluation concern is most closely associated with this implementation pattern?
- ATechnical Debt & Scalability – synchronous callouts inside a loop may hit governor limitsCorrect answer
- BThe Feature Trap – this trigger makes the app feature-rich
- CThe Integration Blindspot – the trigger uses point-to-point integration only
- DLicense assignment neglect – users will not automatically receive the package license
Why this is the answer
A trigger that performs synchronous external callouts per record can consume DML, callout, and CPU limits, creating scalability and performance risk as data volume grows.
- Question 33Single Choice
Why is it important to review the OAuth scopes requested by a Connected App during an AppExchange evaluation?
- ATo ensure the app has the maximum possible permissions for future integrations
- BTo comply with the principle of least privilegeCorrect answer
- CTo confirm the app can access all custom objects without restrictions
- DTo guarantee the app is a managed package
Why this is the answer
Reviewing OAuth scopes ensures the third-party tool requests only the access it truly needs, aligning with the principle of least privilege.
- Question 34Multiple Select
Which of the following are common traps when selecting an AppExchange solution? Select all that apply.
- ASelecting a solution based only on its feature list while ignoring interactions with existing automationCorrect answer
- BUsing an unmanaged package for a solution that requires frequent vendor updatesCorrect answer
- CAssuming a third-party tool is plug-and-play without assessing API overhead or data storage impactCorrect answer
- DReviewing the solution's OAuth scopes and compliance certifications before installation
Why this is the answer
The Feature Trap, Unmanaged Package Oversight, and Integration Blindspot are common risks. Reviewing OAuth scopes and compliance certifications is a recommended practice, not a trap.
- Question 35Interactive
The code block shows the OAuth scope and access level requested by an AppExchange app. Which evaluation principle should you apply before approving the integration?
- ALeast privilegeCorrect answer
- BSingle Source of Truth
- CTechnical Debt
- DFeature Trap
Why this is the answer
The requested scope includes 'full' and 'Unrestricted Admin', which is broader than necessary. The principle of least privilege requires limiting access to only what the tool needs.
Workflow/Process Automation
7 questions in this domain
- Question 36Single Choice
What is a key characteristic of managed packages?
- AVendors can update code without affecting customizationsCorrect answer
- BBecomes part of the org, increasing maintenance
- CCannot receive updates from the vendor
- DRequires modifying source code for every change
Why this is the answer
Managed packages allow vendors to release updates while leaving the customer's ability to customize certain metadata intact, unlike unmanaged packages.
- Question 37Multiple Select
Which security aspects must be evaluated for an AppExchange solution?
- AData encryption standardsCorrect answer
- BOAuth scopesCorrect answer
- CCompliance certificationsCorrect answer
- DUser interface color scheme
Why this is the answer
Security assessments must include data encryption standards, OAuth scopes, and compliance certifications such as SOC2 or HIPAA.
- Question 38Interactive
An administrator is reviewing a solution with the following automation pattern. What risk should be flagged?
- AIt may hit governor limits due to synchronous processingCorrect answer
- BIt is fully secure
- CIt improves data storage
- DIt eliminates the need for testing
Why this is the answer
The pattern processes work synchronously inside a loop, increasing the risk of hitting governor limits as data volume grows.
- Question 39Single Choice
Which element should be considered when calculating total cost of ownership?
- AImplementation and training costsCorrect answer
- BOnly the monthly license fee
- CThe vendor's office location
- DThe number of app colors
Why this is the answer
TCO includes implementation, training, specialized administration, potential storage impact, and the long-term cost of migrating away from the tool.
- Question 40Multiple Select
Which are common traps when evaluating AppExchange solutions?
- AFeature TrapCorrect answer
- BUnmanaged Package OversightCorrect answer
- CIntegration BlindspotCorrect answer
- DReviewing OAuth scopes
Why this is the answer
Common traps include focusing on features only, choosing unmanaged packages when updates are needed, and ignoring integration overhead.
- Question 41Interactive
What integration method is represented by this code?
- APoint-to-point integrationCorrect answer
- BMiddleware integration
- CBatch data synchronization
- DUnmanaged package
Why this is the answer
The code makes a direct HTTP callout from Salesforce to an external service, which is a point-to-point integration.
- Question 42Single Choice
Which statement best describes unmanaged packages?
- AIt becomes part of the org and increases maintenanceCorrect answer
- BIt is automatically updated by the vendor
- CIt cannot be customized
- DIt requires no security review
Why this is the answer
Unmanaged packages are essentially templates that become part of the customer's org, increasing long-term maintenance responsibilities.
Frequently asked questions
Everything about the Salesforce Certified Advanced Administrator question bank and how to use it.