Salesforce Admin Certification Exam Test
Bank 2026/2027 – Questions and Answers
100% Verified | Detailed Rationales – Pass
Guaranteed – A+ Graded
Section 1: Configuration and Setup (15 Questions)
Q1: A new Salesforce admin at Ursa Major Logistics needs to ensure that all users in the organization see
the company's fiscal year beginning on February 1. Where should this be configured?
A. In each user's personal settings under Locale and Language
B. In Setup under Company Information, using the Fiscal Year settings
C. In the role hierarchy by adjusting the top-level role
D. In each profile's System Permissions section
Correct Answer: B
Rationale: The best answer is B. Fiscal year settings are company-wide and live in Setup under Company
Information, so you configure them once for the entire org rather than per user or per profile.
Q2: Universal Containers has users in the United States, Japan, and Germany. The company wants each
user to see dates and numbers formatted according to their local conventions while keeping all
opportunity amounts in the corporate currency. What should the admin verify?
A. That multi-currency is enabled and each user's locale is set correctly on their user record
B. That each user has the "Manage Currencies" permission
C. That a separate role exists for each country
D. That the organization-wide default for opportunities is set to Private
Correct Answer: A
Rationale: The best answer is A. Locale controls how dates and numbers display, while the corporate
currency anchors reporting values, so you enable multi-currency and set each user's locale on the user
record.
Q3: A Salesforce admin receives a request to prevent users from logging in outside of normal business
hours, Monday through Friday, 8 AM to 6 PM. What is the most appropriate configuration?
,A. Set the organization-wide default for the User object to Private
B. Configure login hours on the profile assigned to those users
C. Create a validation rule on the User object
D. Enable login IP ranges on the permission set
Correct Answer: B
Rationale: The best answer is B. Login hours are a profile-level setting that restricts when users can sign
in, which is exactly the control being requested here.
Q4: Which three settings can be controlled at the profile level to strengthen authentication? (Select all
that apply.)
A. Login IP ranges
B. Login hours
C. Password expiration period
D. Organization-wide defaults
Correct Answer: A, B, C
Rationale: The best answer is A, B, and C. Login IP ranges, login hours, and password policies are all
profile-level controls, while organization-wide defaults govern record access, not authentication.
Q5: A sales manager reports that a new hire cannot see the "Reports" tab even though other reps on
the same team can. What is the most likely cause?
A. The new hire's profile is missing the "Run Reports" permission
B. The new hire's role is below the sales manager in the hierarchy
C. The organization-wide default for reports is set to Private
D. The new hire has not been added to a Chatter group
Correct Answer: A
Rationale: The best answer is A. Tab visibility and the "Run Reports" user permission are controlled
through the profile or a permission set, so a missing permission is the most common reason one user
can't see Reports while peers can.
Q6: Northern Trail Outfitters wants to grant a small group of power users the ability to delete leads
without changing their baseline profile. What is the recommended approach?
A. Clone the standard user profile and modify it for the power users
B. Assign a permission set that includes the "Delete" object permission for Leads
C. Change the organization-wide default for leads to Public Read/Write
D. Add the power users to a public group and share all leads with it
Correct Answer: B
, Rationale: The best answer is B. Permission sets are additive and were designed for exactly this situation
— granting extra access to a subset of users without altering their underlying profile.
Q7: A Salesforce admin needs to give 40 support agents temporary access to a new object during a
product launch, then remove it after 90 days. What is the most efficient way to manage this?
A. Create a new profile for the agents and reassign them
B. Create a permission set with the required access and assign it via a permission set group with a set
expiration
C. Modify the standard user profile to add the object permission
D. Create a sharing rule on the object
Correct Answer: B
Rationale: The best answer is B. Permission set groups let you bundle access and, combined with
assignment expiration, give you a clean way to add and automatically remove temporary access without
touching profiles.
Q8: Which statement correctly describes the relationship between profiles and permission sets?
A. Profiles and permission sets both grant permissions, but profiles are the baseline and permission sets
are additive
B. Permission sets replace profiles when a user needs more access
C. A user can have only one permission set at a time
D. Profiles can be assigned to multiple users, but permission sets are limited to one user each
Correct Answer: A
Rationale: The best answer is A. Every user has exactly one profile that sets the baseline, and permission
sets layer additional access on top, which is why they're the preferred tool for exceptions.
Q9: Cloud Kicks has a requirement that only users in the "Executive" role should see the salaries field on
the Contact object. What is the most appropriate way to enforce this?
A. Create a validation rule that blocks edits for non-executives
B. Use field-level security on the profile or a permission set to hide the field
C. Set the organization-wide default for Contacts to Private
D. Create a sharing rule that excludes non-executive roles
Correct Answer: B
Rationale: The best answer is B. Field-level security is the correct control for hiding a specific field from
certain users, and it's managed through profiles and permission sets.
Bank 2026/2027 – Questions and Answers
100% Verified | Detailed Rationales – Pass
Guaranteed – A+ Graded
Section 1: Configuration and Setup (15 Questions)
Q1: A new Salesforce admin at Ursa Major Logistics needs to ensure that all users in the organization see
the company's fiscal year beginning on February 1. Where should this be configured?
A. In each user's personal settings under Locale and Language
B. In Setup under Company Information, using the Fiscal Year settings
C. In the role hierarchy by adjusting the top-level role
D. In each profile's System Permissions section
Correct Answer: B
Rationale: The best answer is B. Fiscal year settings are company-wide and live in Setup under Company
Information, so you configure them once for the entire org rather than per user or per profile.
Q2: Universal Containers has users in the United States, Japan, and Germany. The company wants each
user to see dates and numbers formatted according to their local conventions while keeping all
opportunity amounts in the corporate currency. What should the admin verify?
A. That multi-currency is enabled and each user's locale is set correctly on their user record
B. That each user has the "Manage Currencies" permission
C. That a separate role exists for each country
D. That the organization-wide default for opportunities is set to Private
Correct Answer: A
Rationale: The best answer is A. Locale controls how dates and numbers display, while the corporate
currency anchors reporting values, so you enable multi-currency and set each user's locale on the user
record.
Q3: A Salesforce admin receives a request to prevent users from logging in outside of normal business
hours, Monday through Friday, 8 AM to 6 PM. What is the most appropriate configuration?
,A. Set the organization-wide default for the User object to Private
B. Configure login hours on the profile assigned to those users
C. Create a validation rule on the User object
D. Enable login IP ranges on the permission set
Correct Answer: B
Rationale: The best answer is B. Login hours are a profile-level setting that restricts when users can sign
in, which is exactly the control being requested here.
Q4: Which three settings can be controlled at the profile level to strengthen authentication? (Select all
that apply.)
A. Login IP ranges
B. Login hours
C. Password expiration period
D. Organization-wide defaults
Correct Answer: A, B, C
Rationale: The best answer is A, B, and C. Login IP ranges, login hours, and password policies are all
profile-level controls, while organization-wide defaults govern record access, not authentication.
Q5: A sales manager reports that a new hire cannot see the "Reports" tab even though other reps on
the same team can. What is the most likely cause?
A. The new hire's profile is missing the "Run Reports" permission
B. The new hire's role is below the sales manager in the hierarchy
C. The organization-wide default for reports is set to Private
D. The new hire has not been added to a Chatter group
Correct Answer: A
Rationale: The best answer is A. Tab visibility and the "Run Reports" user permission are controlled
through the profile or a permission set, so a missing permission is the most common reason one user
can't see Reports while peers can.
Q6: Northern Trail Outfitters wants to grant a small group of power users the ability to delete leads
without changing their baseline profile. What is the recommended approach?
A. Clone the standard user profile and modify it for the power users
B. Assign a permission set that includes the "Delete" object permission for Leads
C. Change the organization-wide default for leads to Public Read/Write
D. Add the power users to a public group and share all leads with it
Correct Answer: B
, Rationale: The best answer is B. Permission sets are additive and were designed for exactly this situation
— granting extra access to a subset of users without altering their underlying profile.
Q7: A Salesforce admin needs to give 40 support agents temporary access to a new object during a
product launch, then remove it after 90 days. What is the most efficient way to manage this?
A. Create a new profile for the agents and reassign them
B. Create a permission set with the required access and assign it via a permission set group with a set
expiration
C. Modify the standard user profile to add the object permission
D. Create a sharing rule on the object
Correct Answer: B
Rationale: The best answer is B. Permission set groups let you bundle access and, combined with
assignment expiration, give you a clean way to add and automatically remove temporary access without
touching profiles.
Q8: Which statement correctly describes the relationship between profiles and permission sets?
A. Profiles and permission sets both grant permissions, but profiles are the baseline and permission sets
are additive
B. Permission sets replace profiles when a user needs more access
C. A user can have only one permission set at a time
D. Profiles can be assigned to multiple users, but permission sets are limited to one user each
Correct Answer: A
Rationale: The best answer is A. Every user has exactly one profile that sets the baseline, and permission
sets layer additional access on top, which is why they're the preferred tool for exceptions.
Q9: Cloud Kicks has a requirement that only users in the "Executive" role should see the salaries field on
the Contact object. What is the most appropriate way to enforce this?
A. Create a validation rule that blocks edits for non-executives
B. Use field-level security on the profile or a permission set to hide the field
C. Set the organization-wide default for Contacts to Private
D. Create a sharing rule that excludes non-executive roles
Correct Answer: B
Rationale: The best answer is B. Field-level security is the correct control for hiding a specific field from
certain users, and it's managed through profiles and permission sets.
