{"id":900,"date":"2026-08-01T10:00:00","date_gmt":"2026-08-01T04:30:00","guid":{"rendered":"https:\/\/swapnilzambare.com\/blog\/security-scenario-interview-questions\/"},"modified":"2026-10-10T13:37:37","modified_gmt":"2026-10-10T08:07:37","slug":"security-scenario-interview-questions","status":"publish","type":"post","link":"https:\/\/swapnilzambare.com\/blog\/security-scenario-interview-questions\/","title":{"rendered":"Security Scenario Interview Questions for Salesforce Admins"},"content":{"rendered":"\n

Security Scenario Interview Questions test how you handle real access problems, such as a user who cannot see a record or a contractor who needs short-term access. This is Post 1 of our scenario series, and it covers profiles, sharing, login security, auditing and data protection.<\/p>\n\n\n\n

Each scenario matches a topic from our Salesforce Security Interview Questions<\/a> list. Read that list first if a term is new, then come back and practise these real situations aloud.<\/p>\n\n\n\n

How to Use These Security Scenario Interview Questions<\/h2>\n\n\n\n

Answer every scenario in four short steps. First, repeat the problem in your own words. Next, say what you would check. Then name the exact feature or setting you would use, and say why. Finally, explain how you would test the fix with a real user.<\/p>\n\n\n\n

\"Security<\/a>
How to answer Security Scenario Interview Questions: understand, check access layers, act, then verify.<\/figcaption><\/figure>\n\n\n\n

Security Scenario Interview Questions on Object and Field Access<\/h2>\n\n\n\n

Study with Profiles and Permission Sets<\/a>.<\/p>\n\n\n\n

    \n
  1. A user can see the Account tab but gets “insufficient privileges” when opening an account. What do you check, in order?<\/li>\n\n
  2. Only two finance users may edit the Fee field, but everyone must see it. How do you set it up?<\/li>\n\n
  3. A new team needs full access to one custom object and nothing else. How do you build their access?<\/li>\n\n
  4. Junior agents need senior agent access, except Delete on cases. How do you build it with the fewest changes?<\/li>\n\n
  5. Your org has 40 custom profiles that differ by small settings. How do you plan a cleanup without breaking access?<\/li>\n\n
  6. A field is hidden on the page layout, but users still see it in a report. Why, and how do you fix it?<\/li>\n\n
  7. A contractor needs admin-like access for two weeks only. How do you give it and make sure it ends?<\/li>\n\n
  8. A user needs to edit contacts but must never export them. What do you check and change?<\/li>\n\n
  9. A manager wants a new hire to have the same access as a colleague. How do you copy it safely?<\/li>\n\n
  10. Users can create accounts but cannot see the Create button on the related list. What do you check?<\/li>\n\n
  11. An app tab disappeared for all sales users after a deployment. What could cause it?<\/li>\n\n
  12. A support user needs to read opportunities but never edit them. How do you set it up?<\/li>\n<\/ol>\n\n\n\n

    A good answer checks access in order: profile or permission set first, then field-level security. Also say how you would test with Login As.<\/p>\n\n\n\n

    Record Access Scenarios<\/h2>\n\n\n\n

    Study with Sharing Rules, Roles and OWD<\/a>.<\/p>\n\n\n\n

      \n
    1. A user cannot see a record that a colleague can see. Walk through your troubleshooting steps.<\/li>\n\n
    2. Reps must see only their own opportunities, but managers must see their whole team. How do you set it up?<\/li>\n\n
    3. Two regional managers report to the same director but must not see each other deals. How do you design roles and sharing?<\/li>\n\n
    4. The Pune support team needs read access to all accounts in Pune, wherever the owner sits. What do you create?<\/li>\n\n
    5. A partner consultant must see one opportunity only, for one month. How do you do it?<\/li>\n\n
    6. Users can see a record but cannot edit it, even though their profile has Edit. What could cause it?<\/li>\n\n
    7. A sharing rule change has been running for hours. Why, and what do you tell the business?<\/li>\n\n
    8. Everyone should see all courses, but only course owners should edit them. What OWD and rules do you use?<\/li>\n\n
    9. A manager left, and their team suddenly cannot see each other records. What happened, and how do you fix it?<\/li>\n\n
    10. A user moved from Sales to Support, but still sees all sales deals. What do you check?<\/li>\n\n
    11. Account OWD is Private, but reps see every contact. Why?<\/li>\n\n
    12. Leadership asks why a junior user can see a high-value opportunity. How do you explain it?<\/li>\n\n
    13. A new criteria-based sharing rule does not give access to some records. What do you check?<\/li>\n\n
    14. A queue member cannot see cases in the queue. What could cause it?<\/li>\n<\/ol>\n\n\n\n

      A strong answer names the OWD, the role hierarchy and the exact sharing rule. Then it uses the Sharing Hierarchy button to prove who has access and why.<\/p>\n\n\n\n

      Security Scenario Interview Questions on Restricting Access<\/h2>\n\n\n\n

      Study with Restriction Rules and Scoping Rules<\/a>.<\/p>\n\n\n\n

        \n
      1. Agents must see only cases from their own region, even though case OWD is Public Read Only. What do you use?<\/li>\n\n
      2. Reps should see only tasks linked to their own accounts. How do you build it?<\/li>\n\n
      3. A user sees a record in a report but not in a list view. What could cause the difference?<\/li>\n\n
      4. Users see too many records in search and list views, but they still need access for reports. What helps?<\/li>\n\n
      5. Leadership wants to hide salary data from everyone except HR, including managers above HR. What do you do?<\/li>\n\n
      6. A restriction rule hides records from a manager who needs them. How do you fix it without removing the rule?<\/li>\n\n
      7. Users must see only accounts in their territory in list views, but reports must show all. What helps?<\/li>\n\n
      8. A user with View All on Case still cannot see some cases. What could cause it?<\/li>\n<\/ol>\n\n\n\n

        Interviewers want to hear that restriction rules hide records even when sharing gives access. So say when you would use one, and how you would test it.<\/p>\n\n\n\n

        \"Security<\/a>
        Sharing rules compared with restriction rules, a common choice in Security Scenario Interview Questions.<\/figcaption><\/figure>\n\n\n\n

        Login and Identity Scenarios<\/h2>\n\n\n\n

        Study with Org Security<\/a> and Single Sign-On<\/a>.<\/p>\n\n\n\n

          \n
        1. A sales rep cannot log in from a hotel while travelling. What do you check?<\/li>\n\n
        2. A user lost the phone with their authenticator app and has a client meeting in an hour. How do you help them?<\/li>\n\n
        3. Security wants users logged out after 30 minutes of no activity, except on the support floor. How do you set it up?<\/li>\n\n
        4. Staff must log in with their Microsoft work account. What do you set up, and how do you avoid locking out admins?<\/li>\n\n
        5. An employee left this morning and may still have an active session. What do you do right now?<\/li>\n\n
        6. Users in one office get identity verification codes on every login. Why, and how do you fix it?<\/li>\n\n
        7. A user is locked out after too many wrong passwords on a Friday night. What can you do?<\/li>\n\n
        8. Security wants logins only from the office network, except for managers. How do you set it up?<\/li>\n\n
        9. Users must log in again every time they switch apps. What do you check?<\/li>\n\n
        10. An API tool stops working after a password reset. Why?<\/li>\n\n
        11. An admin is locked out because SSO is down. How should you have planned for this?<\/li>\n<\/ol>\n\n\n\n

          A good answer covers the login policy, the user record and Login History. Also mention a plan for admins if single sign-on fails.<\/p>\n\n\n\n

          Security Scenario Interview Questions on Auditing and Monitoring<\/h2>\n\n\n\n

          Study with Audit Trail<\/a> and Event Monitoring<\/a>.<\/p>\n\n\n\n

            \n
          1. A fee value changed last week and nobody knows who changed it. How do you find out?<\/li>\n\n
          2. Security asks who changed a profile yesterday. Where do you look, and what will you find?<\/li>\n\n
          3. An auditor asks who can see student phone numbers. How do you produce a clear answer?<\/li>\n\n
          4. Health Check shows a low score. What do you fix first, and why?<\/li>\n\n
          5. A manager suspects a user exported many contacts before leaving. What can you check?<\/li>\n\n
          6. Leadership wants a monthly review of admin changes. What do you set up?<\/li>\n\n
          7. A record owner changed and nobody knows how. What do you check?<\/li>\n\n
          8. Leadership wants to know which users have not logged in for 90 days. How do you find them?<\/li>\n\n
          9. A permission set was assigned to the wrong user last month. How do you find out who did it?<\/li>\n\n
          10. Security wants an alert when someone exports a large report. What are your options?<\/li>\n<\/ol>\n\n\n\n

            Name the exact tool: Setup Audit Trail for setup changes, field history for record values, and Event Monitoring for user actions.<\/p>\n\n\n\n

            Data Protection and Integrations Scenarios<\/h2>\n\n\n\n

            Study with Platform Encryption<\/a> and External Client Apps<\/a>.<\/p>\n\n\n\n

              \n
            1. Legal wants student phone numbers encrypted at rest. What do you check before you turn it on?<\/li>\n\n
            2. Developers use a Full sandbox that holds real customer data. What do you do?<\/li>\n\n
            3. A billing system needs read access to two objects only. How do you secure the integration?<\/li>\n\n
            4. An integration still logs in as a real employee who is leaving. How do you move it safely?<\/li>\n\n
            5. A team wants to install an AppExchange app that asks for wide access. What do you check first?<\/li>\n\n
            6. Someone shared an integration password in a chat message. What do you do?<\/li>\n\n
            7. Testers need sandbox users with real permissions but no real data. What do you do?<\/li>\n\n
            8. An integration user needs write access to one object only. How do you give it?<\/li>\n\n
            9. An external auditor needs read-only access for two weeks. How do you set it up?<\/li>\n\n
            10. A team wants to store bank account numbers in a text field. What do you advise?<\/li>\n<\/ol>\n\n\n\n

              A strong answer protects data in every org, including sandboxes. It also gives each integration its own user with the least access.<\/p>\n\n\n\n

              Security Scenario Interview Questions on Delegated and External Users<\/h2>\n\n\n\n

              Study with Delegated Administration<\/a> and Experience Cloud<\/a>.<\/p>\n\n\n\n

                \n
              1. A team lead must reset passwords for their team only. How do you set it up?<\/li>\n\n
              2. Regional leads want to create users but must not change profiles. What do you allow?<\/li>\n\n
              3. Customers in a portal must see only their own cases. How do you set it up?<\/li>\n\n
              4. A guest user on your site can see records it should not. How do you find and fix the cause?<\/li>\n\n
              5. Partners must see and update only their own deals. What licences and sharing do you use?<\/li>\n\n
              6. A partner user sees other partners accounts. What do you check?<\/li>\n\n
              7. A customer user cannot see their own case after creating it. Why?<\/li>\n\n
              8. A delegated admin assigned a powerful permission set by mistake. How do you prevent it?<\/li>\n\n
              9. Your site guest user profile has edit access to an object. What do you do?<\/li>\n<\/ol>\n\n\n\n

                Explain which licence and sharing tool each external user needs. Then say how you would test as a portal user.<\/p>\n\n\n\n

                Security Scenario Interview Questions FAQ<\/h2>\n\n\n\n

                How long should a security scenario answer be?<\/h3>\n\n\n\n

                About one minute. Name the access layer, the exact setting and how you would test with the user.<\/p>\n\n\n\n

                What if I do not know the answer?<\/h3>\n\n\n\n

                Say how you would find it, for example with the Sharing Hierarchy button or a test user in a sandbox.<\/p>\n\n\n\n

                Official Resources<\/h2>\n\n\n\n