Question bank
Salesforce Certified System Architect
40 Salesforce Certified System Architect questions with the correct answer and a written explanation, organised across 4 exam domains.
- 40 questions
- 4 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Data Modeling & Management
10 questions in this domain
- Question 1Single Choice
In a Salesforce integration architecture, which API protocol is optimized for high-volume, asynchronous data processing to avoid synchronous timeout constraints?
- ABulk APICorrect answer
- BREST API
- CSOAP API
- DMetadata API
Why this is the answer
Bulk API is designed for large data volumes and asynchronous processing, avoiding synchronous timeout constraints that commonly affect REST or SOAP callouts.
- Question 2Multiple Select
Which two characteristics are associated with SOAP API when compared to REST for Salesforce web service integrations? (Choose two.)
- AStrictly typed XML payloadsCorrect answer
- BLightweight JSON by default
- CTransactional integrityCorrect answer
- DStateless and cacheable
Why this is the answer
SOAP is strictly typed and XML-based, and supports transactional integrity. REST is lightweight and stateless, so those are not SOAP characteristics.
- Question 3Interactive
Review the Apex code block in the interactive panel. Which type of HTTP integration behavior is being executed by this Salesforce code?
- ASynchronous calloutCorrect answer
- BQueueable asynchronous job
- CPlatform Event publish
- DBatch Apex chunk
Why this is the answer
The code uses HttpRequest and Http.send, which blocks until a response returns; therefore it represents a synchronous callout.
- Question 4Single Choice
Which OAuth 2.0 flow should an architect select for a server-to-server Salesforce integration that must run without any end-user interaction?
- AJWT Bearer flowCorrect answer
- BUser-Agent flow
- CAuthorization Code flow
- DPassword Grant
Why this is the answer
JWT Bearer flow uses a digital certificate and private key for machine-to-machine authentication with no user interaction.
- Question 5Multiple Select
Which two benefits does asynchronous processing provide in a Salesforce integration architecture compared with synchronous transactions? (Choose two.)
- AHigher governor limitsCorrect answer
- BImmediate user-visible error messages
- CImproved overall throughputCorrect answer
- DLower latency for a single transaction
Why this is the answer
Asynchronous processing offers higher governor limits and improves overall throughput, while synchronous processing provides lower latency and immediate errors.
- Question 6Interactive
Examine the Apex code block shown in the panel. What type of Salesforce event is being published by the EventBus.publish call?
- APlatform EventCorrect answer
- BChange Data Capture event
- CCustom Object
- DTask
Why this is the answer
EventBus.publish indicates a Platform Event being published. Change Data Capture fires automatically on record changes, not through this statement.
- Question 7Single Choice
In Salesforce API governance, what mechanism should an integration design use to handle '429 Too Many Requests' errors gracefully?
- ARetry logic and circuit breakersCorrect answer
- BIncreasing synchronous timeout
- CRemoving OAuth scopes
- DConverting to synchronous calls
Why this is the answer
Retry logic with circuit breakers handles 429 responses gracefully by backing off and avoiding retry storms that worsen API limits.
- Question 8Multiple Select
Which two activities are part of API lifecycle management when ensuring version updates do not break external integrations? (Choose two.)
- AVersioningCorrect answer
- BRetirementCorrect answer
- CPassword hashing
- DData encryption
Why this is the answer
API lifecycle management includes versioning and retirement to ensure updates do not break external integrations.
- Question 9Interactive
Review the Apex code in the interactive panel. What governor limit is being measured by the getCpuTime method calls in this snippet?
- ACPU time consumedCorrect answer
- BNumber of DML rows
- CHeap size remaining
- DQuery rows returned
Why this is the answer
Limits.getCpuTime measures CPU time consumed by the transaction, helping architects avoid LimitException from excessive processing.
- Question 10Single Choice
Which asynchronous integration pattern stores messages in a queue so that Salesforce can continue processing without waiting for a downstream response?
- AMessage Queuing & Pub/SubCorrect answer
- BSynchronous REST callout
- CDirect database connection
- DOAuth token exchange
Why this is the answer
Message Queuing stores messages until consumers are ready, decoupling systems and preventing timeouts during traffic spikes.
Identity and Access Management
10 questions in this domain
- Question 11Single Choice
Which API type is designed for high-volume, asynchronous data processing to avoid synchronous timeout limits?
- AREST API
- BSOAP API
- CBulk APICorrect answer
- DEvent Bus
Why this is the answer
Bulk API processes high volumes asynchronously. REST and SOAP are synchronous and cannot handle massive datasets without timeout constraints.
- Question 12Multiple Select
Which two governance techniques are used to handle '429 Too Many Requests' errors gracefully in API integrations?
- ADesigning retry logicCorrect answer
- BImplementing circuit breakersCorrect answer
- CCreating more SOAP endpoints
- DDisabling OAuth scopes
Why this is the answer
API governance uses retries and circuit breakers to handle rate-limit errors, preserving platform stability and preventing request overload.
- Question 13Interactive
Examine the Apex code snippet. Which asynchronous processing style is shown in the code block?
- AFuture methodCorrect answer
- BQueueable
- CBatch Apex
- DScheduled Apex
Why this is the answer
The @future(callout=true) annotation marks a future method that runs asynchronously for outbound callouts.
- Question 14Single Choice
Which OAuth 2.0 flow uses a digital certificate to establish trust for server-to-server integration?
- AJWT Bearer FlowCorrect answer
- BUser-Agent Flow
- CAuthorization Code Flow
- DPassword Grant
Why this is the answer
JWT Bearer flow uses a certificate-based digital signature, making it ideal for trusted server-to-server automation.
- Question 15Multiple Select
Which two communication channels are recommended to alert administrators when an asynchronous process fails after the caller has disconnected?
- AEmailCorrect answer
- BCustom Log objectCorrect answer
- CToast notification
- DSynchronous Debug log
Why this is the answer
Because users do not see errors in async flows, architects should use Email or Custom Log objects as secondary notification channels.
- Question 16Interactive
Analyze the HTTP request in the code block. Which OAuth 2.0 grant type is being used?
- AClient CredentialsCorrect answer
- BAuthorization Code
- CJWT Bearer
- DPassword Grant
Why this is the answer
A request presenting only client credentials, with no redirect_uri or user identity, indicates the client credentials grant.
- Question 17Single Choice
In Salesforce, what architectural component acts as the gateway for external applications to request OAuth access?
- AConnected AppCorrect answer
- BAPI Gateway
- CPlatform Event
- DEvent Bus
Why this is the answer
A Connected App is the OAuth configuration that lets architects set scopes, IP restrictions, and required permissions for integrations.
- Question 18Multiple Select
Which two true statements describe Change Data Capture (CDC)?
- AIt publishes events automatically on record changesCorrect answer
- BIt requires custom triggers for every object
- CIt is useful for synchronizing external databases or cachesCorrect answer
- DIt only applies to custom objects
Why this is the answer
CDC automatically publishes events for create, update, delete, and undelete, and is used to sync external systems without custom triggers.
- Question 19Interactive
Refer to the JSON event message in the code block. Which Salesforce component is responsible for routing this message to subscribers?
- AEvent BusCorrect answer
- BESB
- CAPI Gateway
- DBulk API
Why this is the answer
The Event Bus manages routing and delivery of Platform Events to subscribers.
- Question 20Single Choice
Which security design pattern maintains long-lived access without requiring repeated user authentication?
- ARefresh TokenCorrect answer
- BOAuth Scope
- CAPI Key
- DSession ID
Why this is the answer
Refresh tokens maintain long-lived access without repeated user authentication while requiring lifecycle and rotation management.
Integration Architecture
10 questions in this domain
- Question 21Single Choice
Which API protocol is specifically designed to process massive data volumes asynchronously without hitting synchronous timeout limits?
- AREST API
- BSOAP API
- CBulk APICorrect answer
- DMetadata API
Why this is the answer
Bulk APIs are built for high-volume asynchronous data processing, while REST and SOAP are synchronous and can timeout on large datasets.
- Question 22Multiple Select
Which two characteristics are true of SOAP-based integration? Choose two.
- AXML-based message formatCorrect answer
- BLightweight and stateless
- CStrictly typed contractsCorrect answer
- DBuilt for massive asynchronous workloads
Why this is the answer
SOAP relies on XML, enforces strict typing, and supports transactional integrity; it is not lightweight or asynchronous bulk-oriented.
- Question 23Interactive
The code block shows a token request. What does the grant_type indicate about this integration?
- AA server-to-server integration with no user contextCorrect answer
- BA client-side user-agent flow
- CA JWT bearer flow using a certificate
- DAn authorization code flow with user login
Why this is the answer
Client credentials is a machine-to-machine flow; authorization code and user-agent involve users, while JWT uses a certificate.
- Question 24Single Choice
Which OAuth flow is the gold standard for automated server-to-server integration when a digital certificate is required?
- AJWT Bearer FlowCorrect answer
- BUser-Agent Flow
- CAuthorization Code Flow
- DPassword Grant
Why this is the answer
JWT Bearer Flow uses a private key/certificate for server-to-server trust and requires no user interaction.
- Question 25Multiple Select
Which two Salesforce-native tools can be used to publish events for an event-driven integration? Choose two.
- APlatform EventsCorrect answer
- BChange Data CaptureCorrect answer
- CEnterprise Service Bus
- DConnected App
Why this is the answer
Platform Events are custom event objects, and Change Data Capture publishes record-change events on the Salesforce Event Bus.
- Question 26Interactive
The Apex class in the code block is queued for asynchronous execution. What primary advantage does this offer over running the same work synchronously in a trigger?
- AIt provides higher governor limits than a synchronous transactionCorrect answer
- BIt guarantees the calculation finishes before the transaction commits
- CIt removes the need for any exception handling
- DIt automatically tells the user the result in real time
Why this is the answer
Queueable runs outside the user transaction and gets higher limits, preventing CPU and timeout failures.
- Question 27Single Choice
Which integration architecture centralizes message routing, data transformation, and protocol conversion between systems?
- AEnterprise Service BusCorrect answer
- BData Lake
- CChange Data Capture
- DConnected App
Why this is the answer
An ESB acts as a centralized hub that provides routing, transformation, and protocol conversion.
- Question 28Multiple Select
When choosing between synchronous and asynchronous integration, which two architectural trade-offs must be considered? Choose two.
- AThroughput versus latencyCorrect answer
- BWhether the client can remain blocked waiting for a responseCorrect answer
- CThe color scheme of the external UI
- DThe need to avoid all database indexes
Why this is the answer
Synchronous patterns favor low latency and blocking calls; asynchronous patterns favor throughput and non-blocking flows.
- Question 29Interactive
The HTTP response in the code block occurs while calling a Salesforce API. How should the integration architecture handle this response?
- ARetry after the specified delay with backoff / circuit-breaker logicCorrect answer
- BIgnore the response and continue sending requests
- CImmediately retry the request many times
- DSwitch to synchronous callouts without any delay
Why this is the answer
A 429 means the limit was reached; honoring Retry-After and using circuit breakers prevents a retry storm.
- Question 30Single Choice
What process ensures that changes to Salesforce objects or logic do not break existing external integrations?
- AAPI versioningCorrect answer
- BAPI rate limiting
- COAuth scopes
- DBulk API jobs
Why this is the answer
API versioning keeps older integration contracts intact when Salesforce logic or objects change.
Platform Development Lifecycle & Deployment
10 questions in this domain
- Question 31Single Choice
Which API protocol is designed for high-volume asynchronous data processing?
- AREST API
- BSOAP API
- CBulk APICorrect answer
- DStreaming API
Why this is the answer
Bulk API is optimized for high-volume, asynchronous data processing, avoiding synchronous timeout constraints.
- Question 32Multiple Select
Which two statements accurately describe REST and SOAP API protocols?
- AREST is lightweight, stateless, and uses JSON.Correct answer
- BSOAP provides strict XML typing and transactional integrity.Correct answer
- CBulk API is the preferred protocol for single synchronous record operations.
- DREST is always the most efficient choice for massive datasets.
Why this is the answer
REST uses stateless JSON, while SOAP relies on strict XML and transactional integrity. Bulk API is needed for massive datasets.
- Question 33Interactive
Review the Apex code block. Which asynchronous mechanism is being used?
- AQueueable ApexCorrect answer
- BBatch Apex
- CScheduled Apex
- DFuture Method
Why this is the answer
The class implements the Queueable interface and its execute method, so Queueable Apex is used.
- Question 34Single Choice
Which OAuth 2.0 flow is designed for high-security server-to-server integration using a digital certificate?
- AUser-Agent Flow
- BJWT Bearer FlowCorrect answer
- CAuthorization Code Flow
- DPassword Grant
Why this is the answer
JWT Bearer Flow is for server-to-server integration, using a private key or certificate to establish trust without user interaction.
- Question 35Multiple Select
Which two statements correctly distinguish OAuth 2.0 grant types in Salesforce integrations?
- AAuthorization Code is for user-delegated access.Correct answer
- BClient Credentials is for system-to-system access.Correct answer
- CPassword Grant is the recommended modern integration flow.
- DJWT Bearer relies only on a client secret for trust.
Why this is the answer
Authorization Code delegates on behalf of a user, while Client Credentials supports system-to-system access. Password Grant and secret-only JWT are not best practices.
- Question 36Interactive
Given the Apex trigger in the code block, which Salesforce event mechanism is being published?
- APlatform EventCorrect answer
- BChange Data Capture
- COutbound Message
- DCustom Notification
Why this is the answer
The trigger creates a custom Platform Event object and publishes it via EventBus.publish.
- Question 37Single Choice
Which asynchronous Apex mechanism is implemented by implementing the Queueable interface and calling System.enqueueJob?
- AQueueable ApexCorrect answer
- BBatch Apex
- CFuture Method
- DScheduled Apex
Why this is the answer
A class implementing Queueable and submitted with System.enqueueJob uses Queueable Apex, which offloads processing and provides higher limits.
- Question 38Multiple Select
Which two statements about asynchronous processing are true in Salesforce architecture?
- AAsynchronous patterns optimize for high throughput.Correct answer
- BAsynchronous errors can be handled immediately in the user's session.
- CAsynchronous processing provides higher governor limits than synchronous processing.Correct answer
- DThe client remains blocked until the asynchronous call completes.
Why this is the answer
Async optimizes throughput and provides higher limits; errors are not visible to the user and require separate logging and retry mechanisms.
- Question 39Interactive
The code block shows an XML envelope used by which API protocol?
- AREST API
- BSOAP APICorrect answer
- CBulk API
- DStreaming API
Why this is the answer
SOAP uses XML-based envelopes to provide strictly typed, transactional web services.
- Question 40Single Choice
Which HTTP status code signals that Salesforce API request limits have been exceeded?
- A400 Bad Request
- B401 Unauthorized
- C429 Too Many RequestsCorrect answer
- D500 Internal Server Error
Why this is the answer
429 Too Many Requests indicates API rate limiting; retry logic and circuit breakers should handle it gracefully.
Frequently asked questions
Everything about the Salesforce Certified System Architect question bank and how to use it.