Salesforce Integration Architect
What are examples of status codes that represent errors?
404 - File Not Found 500 - Internal Server Error
What are the 5 annotations available for Apex REST methods?
@HttpGet @HttpPost @HttpPut @HttpDelete @HttpPatch
What is REST?
A higher performance version of SOAP and WSDL because we can utilize native HTTP methods and pass lighter weight documents between client and server SO more suitable for things like mobile devices
When the server processes a request, what does it send in response?
A status code
When the server processes the request, the response includes THIS to indicate whether the request was successful, or if errors were encountered.
A status code
What are the key similarities between Web Services and REST APIs?
1) Both support CRUD operations 2) Both APIs expose you to standard and custom object 3) Both support schema describe functionality (allows you to request metadata info)
What are key characteristics of SOA callouts?
1) Bring data of external system into Salesforce for display 2) Reference an external system with a URL 3) Designed to by synchronous (although can use asynchronous)
What does the WSDL in the Web Services API contain?
1) Describes a public interface to a web service by specifying the format of the data that can be exchanged and the operations that can be performed 2) Describes the protocol to be used in exchanging information (SOAP)
What functionality does custom Web Services have?
1) Designed for synchronous scenarios 2) Allows Apex code to be exposed as a Web Service 3) Allows you to build your own on-demand interfaces
How does the Enterprise Service Bus (ESB) architecture work?
1) Distributed services architecture 2) You deploy ESB endpoints/adaptors where your applications are located 3) Highly scalable
What is the Request/Response Pattern?
1) The side making a request, the client application, submits a service request to a server of the other system 2) The server processes the request and returns a response 3) The client application then returns a response
What is the TreeSave REST resource?
Allows you to create multiple records in a single call. Limited to inserts only, and the behavior of the save is all-or-nothing. Supports nested tree structure, such as a parent record with child records (i.e. Account with Contacts).
What is the Batching REST resource?
Allows you to send multiple requests in a single round trip. Simply saves on round trips. Each request is still unrelated. The server then processes them serially, and returns a serialized version of each response.
What is protocol conversion?
An application that converts the protocol of one device to the protocol suitable for another device (to achieve interoperability)
T/F Visualforce mashups are asynchronous.
False. Visualforce mashups are synchronous. The user must wait until the external content is loaded.
If you need to backup an object that contains a lot of XML-like info (ex: EmailMessage), which API should you use?
REST or Bulk API
If you need to back up files (attachment, document, etc.), which API should you use?
REST or SOAP API
If you need to backup an object that is not supported by the Bulk API, which API should you use?
REST or SOAP API
If you need to preserve the governor limit regarding the number of batches per rolling 24 hour period in your backup solution, which API should you use?
REST or SOAP API
What do HTTP Callouts typically use?
REST with JSON
What is the force.com toolkit for facebook?
Free set of tools to build business applications for Facebook 1) Direct access to the Facebook APIs from within Apex code 2) Social components for use on Force.com Sites pages 3) Supports OAuth 2.0, Rest API, pagination, JSON
Can a callout be made during a test class run?
No.
Is message delivery guaranteed when using the Streaming API?
No. Streaming servers don't maintain client state or track of what is delivered. Events may not be processed if the system is being heavily used.
What does the GET method do?
Queries data
What are the constraints on batch size when using the SOAP API?
Default: 500 Min: 200 Max: 2,000
What is the preferred access method for Canvas: Signed Requests or OAuth?
Signed Requests is preferable because Salesforce has built-in infrastructure and results in less chatter across the network?
What does queryAll() execute?
Similar to query(), but will include records in the recycle bin
Is writing a test class for your Apex REST class similar, or different, from how you would write a test class for other Apex classes?
Similar. Call the methods by passing in parameter values and verify the results.
How do you test your Apex REST class?
Simulate a REST request by creating a RestRequest in the test method, and then setting properties on the request. You can also add params that you "pass" in the request to simulate URI parameters. If the method you're testing accesses request values through RestContext, assign the request to RestContext to populate it (RestContext.request = request;).
T/F A trigger has to invoke a @future method that in turn does the HTTP callout.
True
T/F Asynchronous calls to Salesforce are not supported with the REST or SOAP APIs.
True
T/F Salesforce to Salesforce cannot be disabled.
True
T/F Updates performed by the Bulk API won't generate notifications setup through use of the Streaming API.
True
T/F When using upsert(), all records must be of the same sObject type.
True
What is the URI for the Batching REST resource?
/services/data/v37.0/composite/batch
What is the URI for the TreeSave REST resource?
/services/data/v37.0/composite/tree/[TOPLEVELOBJECT]
What security features does Canvas has?
1) A canvas app must be registered as a connected app 2) Canvas allows use of HTTP POST or HTTP GET (Session ID and other query parameters are not exposed with HTTP POST) 4) Admin can control access: OAuth policy, permission sets, and session level security
What are key characteristics of integrations that take place at the user interface level?
1) A composite screen is embedded in the SFDC user interface Ex: mashup 2) The simplest approach 3) Can see all the data in one place 4) Drawback: data doesn't reside in SFDC so you can't report, use workflow rules, etc.
What are key characteristics of the REST API?
1) A generational integration tool 2) Based on the REST architecture (using JSON or XML) 3) Allows you work directly on data (CRUD) 3) Exposes: standard and custom object and metadata 4) uses the existing features of HTTP 4) Is stateless (no cilent context info is stored on server)
What must an HTTP request specify?
1) A named URI representing a resource 2) An HTTP method (HEAD, GET, POST, PATCH, OR DELETE) 3) An OAuth 2.0 access token 4) Data in JSON or XML
What are key characteristics of synchronous processes?
1) A user creates a request and the user is blocked from making another request until the response is returned 2) Appropriate when a very near real-time response is required
What are key characteristics of asynchronous processes?
1) A user initiates a request, but the user doesn't need to wait for a response 2) Close to real-time process
Which objects can be shared via Salesforce to Salesforce?
1) Accounts, Contacts, Leads, Opportunities, Tasks, and Cases 2) Product catalog, Opportunity Products 3) Custom Objects
What are key characteristics of the streaming api?
1) Allows Salesforce to publish notifications of data changes to external systems 2) Provides efficient mechanism of polling against SFDC infrastructure 3) Can send notifications to pages in a Force.com app, app servers, and external clients 4) Uses Bayeux protocol, CometD, and JSON
What are the advantages of the Ajax-based JavaScript SDK leveraged by the force.com canvas?
1) Allows embedded apps to easily access Salesforce data 2) Solves the "Same Origin" policy: when a user clicks on the vf page, a POST request is sent, external app decodes obtaining CanvasRequest object, external app returns HTML that is loaded into SFDC UI, user interacts with external app page in SFDC, then external app calls out to containing frame's JavaScript through Canvas
What are key characteristics of workbench?
1) Allows users to describe, query, manipulate, and migrate data and metadata 2) Provides advanced features for testing APIs like: Customizable SOAP headers, debug logs for API traffic, and backward compatibility with previous API versions
What is a REST callout made up of?
1) An endpoint 2) An HTTP Method
What are controller extensions?
1) Apex classes that add functionality to an existing standard or custom controller 2) Can be reused across different pages
What are custom controllers?
1) Apex classes that implement logic for a page without standard controllers. 2) Coded to create custom behaviors 3) Can be used to create wizards or leverage callouts
When should you use the OAuth webflow as the access method for a Canvas app?
1) App already has OAuth setup into Salesforce 2) Company is more comfortable managing OAuth 3) Authentication info shouldn't be sent automatically
How is user access verified by Salesforce in inbound integrations?
1) Authenticating users 2) Restricting network access 3) Configuring session security
What methods do the SDK classes provide?
1) Authentication 2) Context - to retrieve context info about the environment in which the app is running 3) Cross-Domain XHR - to send cross-domain requests back to Salesforce domain 4) Resizing - to resize the Canvas app 5) Events - to send and receive events between multiple apps
What are the three categories of integration processes based on the actions that invoke them?
1) Automated Process: a user takes an action which causes another action to take place (usually asynchronous or synchronous) 2) Scheduled Process: take place on a predetermined time and are not based on user action (usually batch process) 3) Ad-hoc Request: user makes a request to specifically start the integration (usually asynchronous or synchronous)
What customization and automation considerations should you make when choosing a backup method?
1) Backup and Restore scope (files, metadata, data) 2) Backup automation frequency 3) Need for Backup plan personalization (mix full backups and incremental backups, give higher priority to specific objects, etc.) 4) Backup plan maintenance (environment change detection)
How is long polling implemented when using the Streaming API?
1) Bayeux Protocol: transports messages asynchronously over HTTP 2) CometD a scalable HTTP-based event routing bus that implements the Bayeux protocol
What are key characteristics of embedded content/iFrames?
1) Bring markup of external system into Salesforce 2) Reference an external system with a URL that typically includes some parameters requesting specific info 2) Are asynchronous, requiring user to wait until it is loaded
What can the SOAP API be used to do?
1) CRUD 2) Query and search data 3) Work with approval processes 4) Create and update sharing records!
What content types are allowed for use with the Bulk API?
1) CSV 2) XML 3) ZIP_CSV (binary attachment) 4) ZIP_XML (binary attachment)
How are SOA callouts implemented?
1) Callouts via embedded Javascript 2) Callouts via Apex - A Visualforce controller - Ajax toolkit
What are key characteristics of the SoapUI?
1) Can be used with SOAP or REST based web services 2) Used to inspect, invoke, and develop web services 3) Perform functional, load, and compliance testing of web service 4) Simulate web services by creating mock services
What restoration capability considerations should you make when choosing a backup method?
1) Capability to quickly restore a few records 2) Capability to mass restore and rebuild all relationships between objects 3) Restore process and data quality 4) restore process and system integrations 5) Restore process and automation (validation rules, etc.)
Which solutions should you use in the following scenario: A company has a batch process that assigns prospects to reps. The info needs to be imported into Salesforce on a nightly basis?
1) Change data capture where the Remote System is the data master - ETL tool reacts to changes in the source dataset, transforms the data, and calls Salesforce Bulk API to issue DML statements 2) Change data capture where the Salesforce is the data master - query SFDC data based on time/status info. Can be implemented using SOQL with SOAP API and query() or SOAP API and getupdated()
How can the listener receiving an outbound message verify the source of the message?
1) Check the Salesforce Org ID in the message 2) Check the IP range from which the message is sent 3) Use 2-way TLS for verification/use the client certificate to validate the SFDC server identity
What is the authentication flow used by Salesforce?
1) Checks that login is within login hours set at the profile level 2) Checks if the IP used is within the IP Range Restrictions set at the profile level 3) Then checks org-wide IP range 4) If outside the org-wide IP range, checks if token is provided
What steps are involved when a client application originating outside of Salesforce logs into the API?
1) Client app makes the login() call and provides a username and password 2) If successful, the call returns a session ID (user authentication token) and URL
What API limits does the SOAP API have?
1) Concurrent API Request Limits - for concurrent requests lasting more than 20 seconds 2) Total API Request Limits - within 24 hours
What is the API wrapper Class?
1) Contains generic logic for reuse 2) Includes methods for: login and session management, query() and querymore(), exception handling 3) Does not contain application-specific code
What steps are involved when exposing web services to be invoked by client applications?
1) Create a global class - accessible across all Apex scripts; forms a container for everything else 2) Create an inner Apex class - forms actual request message of the WSDL 3) Create an Apex method: exposed as the web services; defines data mapping and any logic and operations (like insert) 4) Generate the WSDL: share it with the client app
What are the steps involved in using the streaming API?
1) Create one or more push topics 2) Client negotiates a connection with SFDC (keeps alive with long polling) 3) Client makes a request to subscribe to a channel 4) Based on subscriptions, salesforce pushes notifications 5) Upon receiving a response, client immediately sends a request
Which solution should you use in the following scenario: Customer Service Managers would like an alert when a rep successfully closes a case?
1) Creates a PushTopic that sends a notification when a Case is saved with a status of Closed 2) Create a custom UI. The UI subscribes to the PushTopic channel 3) Implement logic in UI that shows alerts generated by the reps
Which operations are likely to cause lock contention?
1) Creating new users 2) Updating record ownership 3) Updating user roles 4) Updating territory hierarchies
Which solutions should be used in the following scenario: You want to display billing history for a customer account without storing billing history in SFDC. They have a web service with the billing details, BUT can't display the data in the browser?
1) Custom visualforce page or button initiates an Apex SOAP callout synchronously 2) Custom visualforce page or button initiates an Apex http callout synchronously (REST API)
What is a signed request?
1) Default authentication method 2) Salesforce performs an HTTP POST: the signed request will contain authorization information, like access token 3) The canvas app must be configured as "Admin-approved users are pre-authorized"
What is a push topic?
1) Defines a channel to which clients can subscribe 2) Determines what events will cause a notification 3) Describes the data the notification will contain
What are the development steps for a Web Services API integration?
1) Download your WSDL - Enterprise, Partner, Apex Web Service, etc. 2) Create a project within an IDE - Visual Studio, Eclipse, etc. 3) Generate Web Service stubs (proxy code) - Provide the Java or C# required to call the APIs 4) Develop your client code
What functionality can be provided by middleware?
1) ETL (Extract, Transform, Load) 2) Data cleansing 3) Process management
How does the point-to-point architecture work?
1) Each system is connected to every other system through a direct integration 2) Easy to implement when only a few systems 3) Difficult to scale
What is involved in the invitation process when setting up Salesforce to Salesforce?
1) Enable Salesforce to Salesforce 2) Customize email templates 3) Assign permissions (authorized users to manage connections0 4) Add Connections tab 5) Customize page layouts 6) Define connection templates 7) Invite! (need and Account and Contact prepared for other org)
What is Transaction Management?
1) Ensures that data exchanged across systems maintain integrity 2) Provides support for transaction commits, rollback, and coordination 3) Has exception handling and error recovery as key elements
What are the primary differences between the Enterprise WSDL and Partner WSDL?
1) Enterprise WDSL is strongly typed and Partner WDSL is loosely typed 2) Enterprise WSDL is tied to a specific config of Salesforce whereas Partner WSDL is useful for any config of Salesforce 3) Enterprise WSDL changes if custom fields or objects are edited whereas Partner WSDL does not
What are the WSDL files available for the Web Services API?
1) Enterprise WSDL: all fields are declared for each object (strongly typed) 2) Partner WSDL: objects and fields are discoverable (loosely typed) 3) Custom Web Service WSDL file: generate WSDL for Apex code classes that you declare as Web Services
How does the Hub and Spoke architecture work?
1) Every system connects to the hub 2) All data transfer is done through the hub 3) Easy to design and implement 4) Architecture tends to be proprietary in nature 5) Single point of failure 6) Inability to support LDVs
What are best practices for credential handling?
1) External app credentials should be stored off the Salesforce platform 2) SFDC OAuth tokens should be stored off the platform 3) API tokens for the external app should be stored via Protected custom settings 4) All credentials should be secure in transit using HTTPS (TLS )
What is OAuth?
1) External app initiates OAuth flow 2) Salesforce performs HTTP GET request to invoke canvas app 3) Two supported flows: Web Server OAuth flow or User-Agent OAuth flow 4) Policy can be "Admin-approved users are preauthorized" or "All users may self-authorize"
What are key characteristics of integrations that take place at the data level?
1) Extract data from one place, transform if needed, and then load into another place 2) Typically done with ETL tools
What two mechanisms are available for SSO?
1) Federated authentication using SAML 2) Delegated Authentication (Salesforce specific mechanism)
Which security considerations you make when choosing a backup method?
1) File system storage (data location, disk capacity, redundancy, encryption of data at rest, etc.) 2) Backup and Restore server configuration (availability, redundancy, etc.) 3) Backup archives retention (retain backups for a specific amount of time)
What is Force.com Canvas?
1) Framework to embed external web apps into SFDC 2) Provides tools to authenticate between systems 3) Provides JavaScript SDK to allow cross-domain callbacks 4) Supplies Salesforce app context to external app 5) Controls access for users through permission sets (Ex: Allow users to modify related contract info sitting in another web app)
What debugging tools can you use with the web service API?
1) HTTP Monitors - Used to capture HTTP traffic - Can capture API SOAP requests/responses 2) soapUI: free open-source desktop app - you can inspect, invoke, and mocking of Web services 3)
How can the SDK be included in the Canvas app?
1) Host the SDK on a personal Web server? 2) Access the SDK hosted on the Salesforce server
What is the Delegator Class?
1) Instantiates a wrapper class 2) Delegates or assigns tasks to other objects or methods 3) May not be reasonable
What are key characteristics of connected apps?
1) Integrates an app with Salesforce using APIs 2) Use SAML and OAuth to authenticate, provide SSO, and provide tokens 3) Admins can set various controls over usage through Profiles, permission sets, and IP range restrictions
What are the steps involved in Salesforce to Salesforce?
1) Invite 2) Publish and Subscribe 3) Collaborate
What is orchestration?
1) Is the automated coordination of complex systems, middleware, and services 2) Applies to enterprise integrations 3) has processes to handle failures, which often include user intervention
What is API Client Whitelisting?
1) It restricts all client app access until explicitly defined by the admin 2) Client apps that are not configured as connected apps are denied access (including Dataloader, Salesforce1, Workbench, and Force.com Migration Tool) 3) Users must have "Use the API Client" permission to access connected apps 4) Contact Salesforce to enable this feature
What are key characteristics of a batch process?
1) Large data volumes are broken into chunks and processed in queues 2) Can be implemented with Bulk API, SOAP API, and REST API 3) Typically done in the context of a scheduled process
On which objects can you use merge()?
1) Lead 2) Contact 3) Account
What are the steps involved in using the Bulk API?
1) Log into Salesforce (has to use SOAP) 2) Create a job 3) Create batches of records and send them to server 4) Close the job (can't add batches once closed) 5) Check the batch status 6) Upon completion of all batches, retrieve batch results
How is network authentication restricted?
1) Login hours and IP ranges in a user's profile 2) Org-wide trusted IP address list
What considerations should you make to support network authentication for your "integration user"?
1) Make sure login hours are appropriate 2) Make sure the trusted IP ranges are set up appropriately 3) Validate Session Settings
How can records be accepted by a subscriber in Salesforce to Salesforce?
1) Manual - Manually accept each records in related list 2) Automatically - accept all records that are shared with org
How can records be removed from the recycle bin?
1) Manual delete 2) Ages out, more than 15 days 3) Limit exceeded 4) emptyRecycleBin() 5) hard delete using Bulk API
How can records be shared by publisher in Salesforce to Salesforce?
1) Manual: navigate on the related list and ford 2) Automated: Queues - owner of a record is queue, and that queue contains a partner company, that record is automatically shared with the other company 3) Automated: API Support - can perform operations on the PartnerNetworkConnection object
What are key advantages of the Partner WSDL?
1) More flexible, metadata driven approach 2) Flexible at runtime rather than design-time 3) Use with Describe metadata calls (if you are using an app across orgs, you can inquire about the fields available on a given object) 4) Use for objects that evolve 5) Uses generic sObjects instead of specific classes like Position__c
What are the Salesforce Mobile Software Development Kit (SDK) approaches?
1) Native: can code apps for each platform 2) HTML5: cross-platform (css and javascript) won't have native platform features 3) Hybird: use a javascript bridge to take advantage of multiple platforms and leverage device capabilities
What are advantages of connected apps?
1) No need for custom authentication logic 2) Least privilege access control based on external app use case 3) Easy to revoke access 4) Out of box functionality for standard auth protocols 5) Can provide access without sharing salesforce username and password with the external app
Which two structures does JSON support?
1) Object 2) Array
What two choices are available for CTI?
1) Open CTI: cloud-based integration; browser and platform agnostic 2) CTI Adaptors: require users to install software on their desktop
What are key characteristics of the Chatter REST API?
1) Optimized for Chatter access 2) Feed items structured for rendering on websites and mobile devices 3) Data automatically localized to the user's time zone and language 4) Built-in pagination
What are key characteristics of outbound messaging?
1) Outbound messaging is one-way an d asynchronous 2) Outbound message can contain enterprise or partner URL and session ID token 3) Simulates request/reply asynchronously
What does the TLS protocol use?
1) PKI (public key infrastructure) 2) Trusted Certificate Authority (CA) to vouch for the server's identity
What HTTP methods are available for use with the Bulk API?
1) POST - used to send request DML and query operations 2) GET - used to retrieve status and results from SFDC
Where can notifications be sent to through the Streaming API?
1) Pages in Salesforce App 2) App servers outside Salesforce 3) External Clients
What are visualforce controllers?
1) Perform application logic 2) Have full access to Apex functionality 3) Interact with pages through components 4) Can be used to maintain state across page interactions
What are common integration architectures?
1) Point-to-point 2) Hub and Spoke 3) Enterprise Service Bus
What is a helper class?
1) Provide additional functionality Ex: logger class uses a logging handler to log messages Ex: A mapper class uses a mapping handler to map data from one format to another
Which queries are not supported in PushTopics?
1) Queries without an ID 2) Queries with relationships
What operations can the Bulk API do?
1) Query 2) Insert 3) update 4) Upsert 5) Delete 6) Hard Delete
Which APIs support JSON?
1) REST API 2) Chatter REST API 3) Streaming API 4) Bulk API
Which permissions does a logged-in user need to receive a record notification?
1) Read access to the object 2) FLS access for fields in the WHERE clause 3) Access to the record (sharing rules) (Note: data returned by the query will be limited to the fields to which the user has access)
What 5 key integration patterns?
1) Remote Process Invocation - Request and Reply 2) Remote Process Invocation--Fire and Forget 3) Batch Data Synchronization 4) Remote Call-In 5) UI Update Based on Data Changes
What is the structure of an sObject?
1) Represents a row within the database (or a record) 2) Type: the Object 3) ID: the record ID 4) FieldsToNull: list of fields to set to null upon update
What security can be used with the REST APIs?
1) Requires Transport Layer Security (TLS) 2) Apps accessing Salesforce are seen as an individual user 3) User record requires API enabled (optionally API Only User) 4) Supports OAuth (remember to configured connected apps)
What are benefits of CTI?
1) Screen Pops 2) Click-to-dial 3) Automatic call logging 4) Call control
What general considerations should you make when choosing a backup method?
1) Security 2) Restoration Capability 3) Fault Tolerance and Scalability 4) Customization and Automation
What does the Connected App framework provide?
1) Security controls for who may access the applications 2) OAuth Scope controls 3) OAuth policies for system behavior when user reconnects 4) SAML service provider settings (optional) 5) Mobile app policy settings to enable screen locking and PIN protection (optional)
How do you create a Job?
1) Send a POST request 2) Specify what to do in the jobInfo (operation, object, and content type *like csv) 3) Salesforce response will include job ID
Where can Visualforce be edited?
1) Setup menu 2) Dev Console 3) Force.com IDE
What does the SDK provide?
1) Sfdc.canvas - general purpose functions 2) Sfdc.canvas.client - functions for client-based activities 3) Sfdc.canvas.oauth - functions for OAuth purposes
What are use cases for Salesforce to Salesforce?
1) Sharing between orgs owned by the same company, but are subsidiaries 2) Sharing company between a company and partner companies (distributor/reseller) 3) Third Party Customer Service
What are the two access methods that can be utilized by Force.com canvas?
1) Signed Request 2) OAuth
What are advantages of OAuth?
1) Simple: Protocol is HTTP based and interfaces already exist 2) Great for mobile 3) Reduces security and management issues with passwords
Which two tools should be leveraged for testing and debugging API calls?
1) SoapUI 2) Workbench
How are Links implemented?
1) Standard or custom buttons, links 2) Formula links (using HYPERLINK) 3) Visualforce tag
What are the three types of time-based integration processes?
1) Synchronous 2) Asynchronous 3) Batch
What does Outbound Messaging enable you to do?
1) Take a copy of a record and post it to an external system 2) Enables near real-time integration 3) Messages fire based on triggered workflow rules or approval processes 4) Messages are sent to any service exposed on the internet
What are key characteristics of Mashup Links?
1) Take user to an external system 2) Reference an external system with a URL (typically includes a parameter requesting specific data) 3) Are asynchronous (have no impact on page load)
What does a named credential specify?
1) The URL of a callout endpoint 2) Required authentication parameters
What is the Callback pattern?
1) The side initiating the request, the client application, submits a service request to the other system 2) The server receives the request and returns an acknowledgement WITHOUT processing request 3) After processing the request, the server does a callback providing the results of the initial request
What are properties of outbound messages?
1) The system may batch a number of outbound messages (up to 100 notifications) 2) Queued until they are sent 3) Retry up to 24 hours 4) May not use encrypted custom fields 5) Unavailable for junction objects 6) Monitoring available Setup > Monitoring > Outbound Messages
What best practice should be followed with OAuth?
1) Tokens should be least privilege. 2) Don't log access tokens on client and server side
What are key characteristics of the Force.com Bulk API?
1) Tool for loading LDV 2) Improves throughput 3) Increases stability, monitoring, an control of LDV 4) Allows better control and optimization of data center resources
What security can be used with the SOAP API?
1) Transport Layer Security (TLS) protocol is required 2) The API client authenticates is identified as an individual AND standard security is enforced 3) The user must have the "API Enabled" permission (can have "API Only User") 4) Optional support for SSO
What outbound integration security does Salesforce offer?
1) Two-way SSL - Both the client and server present a certificate to prove their identity to other party 2) Outbound port restrictions - Port 80: HTTP only - Port 43: HTTPS only 3) Remote Site settings - You must register sites you want to allow callouts to
What performance considerations should you make when working with the web service api?
1) Use Compression gzip (ex in Java: config.setCompression(true); 2) Optimize batch size (default is 500, min 300, max 2000)
At which levels can an integration take place?
1) User Interface 2) Application logic 3) Data
What are the steps involved in OAuth 2.0?
1) User logs in through Salesforce.com 2) User approves access request and system sends authorization code 3) Web server then requests access token 4) Salesforce grants access token if process is error free 5) After token is granted, the web server can access SFDC data
What considerations should you make to support user authentication for your "integration user"?
1) Username/Password credential authentication (set Password Never Expires) 2) Ensure access and actions are permitted for the assigned profile 3) User can be "API only" 4) Limits on number of attempts to login (validate)
What are key features of Salesforce to Salesforce?
1) Uses publish/subscribe methodology 2) Asynchronous, but almost real-time 3) Reporting, workflow, and business integration 4) Freeeee
How is embedded content/iFrames implemented?
1) Visualforce iFrame Tag 2) Web tab
What fault tolerance and scalability considerations should you make when choosing a backup method?
1) Volumes 2) Backup and Restore required stability and RETRY capacity 3) Backup and Restore required degree of automation 4) Backup monitoring and optimizing capacities 5) Backup and Restore required performance (ex: need for parallel processing)
What is the Web Service API based on?
1) WSDL (Web Service Description Language): what Web Services API can do 2) SOAP: The actual implementation of the way the web service works (standard format for documents passed through the client and SFDC)
Which two ways can be used to generate Apex callouts?
1) WSDL2Apex: Consume the WSDL provided by the client app --> generates the Apex class; class handles the rest like constructing the SOAP SML, while invoking the web service, etc. 2) HTTP Services: enables SFDC to integrate to REST-based services; Apex classes lie HTTP, HTTPRequest, and HTTPResponse support ability to manage HTTP requests
What are the APIs available for integrations?
1) Web Services API: typically used for CRUD operations; Based on WDSL/SOAP 2) Rest API: utilized JSON or xml format; lightweight protocol 3) Bulk API (REST-Based): typically used for LDV or data migrations 4) Chatter REST Api: optimized for chatter objects 5) Custom Web Services: apex classes with webservice keyword; custom logic based on WDSL/SOAP
What are the key difference between Web Services and the REST APIs?
1) Web Services is SOAP based; will post SOAP messages 2) REST API native use of HTTP methods; 3) Web Services only supports XML 4) REST API supports JSON or XML
What are the two types of Apex callouts?
1) Web service callouts to SOAP web services use XML (typically require a WDSL document) 2) HTTP callouts to services typically use REST with JSON
How can visualforce mashups be implemented?
1) Web tab 2) Visualforce iFrame tag
Which solutions can you choose from when selecting a backup method?
1) Weekly Data Export 2) Data loader 3) Custom solution leveraging APIs 4) AppExchange App
Where can Web applications integrated through Force.com canvas be placed?
1) Within the chatter tab 2) Visualforce page 3) Publisher action 4) Salesforce console 5) Page Layout 6) Feed item 7) Salesforce1 navigation item 8) Open CTI call control tool
Which solutions should you use in the following scenario: When an Opportunity is Closed Won, the creation of an order is initiated. The data master for the Order is the ERP system. The order must be saved to the Opportunity record?
1) Workflow Rule Outbound Message - ideal when needs to be triggered from an insert or update event 2) Outbound Messaging and Callbacks - useful to handle 1) out-of-sequence messaging 2) idempotency to ensure data is retrieved at a certain time rather than when the message was sent and 3) for retrieving data across objects
What are key considerations of External Objects used in Lightning Connects?
1) Works with Tabs, List Views, Chatter, VF Pages, Apex, REST/SOAP, Salesforce1 2) Is Read-Only 3) Doesn't work with Formula or Roll-up Summary fields 4) Doesn't work with triggers, workflow, approvals, process, validation rules 5) Doesn't work with field history tracking
When is it recommended that you use Salesforce Connect?
1) You have a large amount of data that you don't want to copy into SFDC 2) You need small amounts of data at any one time 3) You need real-time access to data 4) You store data in the cloud or back-office system, but want to display/process in SFDC
What is the Typical Client Construction for the Web Services API?
1) You have the Main Classes which contain business logic 2) Then the Delegator Class, which makes requests to specific sObjects 3) Then calls generic Wrapper Classes, 4) Which calls the stub and proxy code
What are key characteristics of the Web Service API?
1) Your client app prepares and submits a service request to the Force.com Web Service via the API 2) Force.com Web Service processes the request and returns a response 3) Client application handles the response 4) A synchronous process
Which DML operations are supported through the SOAP API?
1) create() 2) update() 3) upsert() 4) delete() 5) emptyRecycleBin() 6) undelete() 7) merge()
How can username/password authentication can be done for inbound integrations?
1) login page 2) OAuth username-password flow 3) API
What are core Web Services API calls?
1) login(), logou(), invalidateSessions() 2) create(), update(), delete(), undelete() 3) query(), queryAll() (to get records in the recycle bin), queryMore() (query() and queryMore() only returns 2,000 records, use queryMore() to get more batches), retrieve() 4) search(), upsert() 5) convertLead(), merge() 6) getDeleted(), getUpdated() 7) emptyRecycleBin() 8) process() 9) getServerTimestamp(), getUserinfo() 10) describeGlobal(), describeSObjects(), describeTabs()
What two SDK methods are available to verify signed requests?
1) verifyAndDecode 2) verifyAndDecodeAsJson
What steps are involved in creating a Canvas App?
1. Create a Connected App 2. Provide a Callback URL 3. Select OAuth Scopes (level of access provided to embedded app) 4. Indicate that the connected app will be a canvas app 5. Provide Canvas APP URL (url for embedded page) 6. Specify access method that will be used by the canvas framework to access the app 7. Choose where the canvas app will appear 8. After saving, retrieve the consumer key and consumer secret
What are the advantages of using an Apex Web Services over the Salesforce SOAP or REST APIs?
1.) Apex methods can encapsulate complex logic. 2.) Complex, custom logic is hidden from the consuming application. 3.) Also, the Apex class operations can be faster than making individual API calls, because fewer roundtrips are performed between the client and the Salesforce servers. With an Apex web service call, there is only one request sent, and all operations within the method are performed on the server.
What are the supported types for parameters and return values in Apex REST classes?
1.) Apex primitives (excluding sObject and Blob). 2.) sObjects 3.) Lists or maps of Apex primitives or sObjects (only maps with String keys are supported). 4.) User-defined types that contain member variables of the types listed above.
What are the two ways to implement a mock callout/response via an apex test class?
1.) By implementing the HttpCalloutMock interface 2.) By using a static resource with either the StaticResourceCalloutMock or MultiStaticResourceCalloutMock classes
With an HTTP Callout, what two pieces of information do you need to provide at a minimum?
1.) Endpoint URL 2.) Http method to use (i.e. GET, POST, etc.)
What are the three core classes used for HTTP Callouts?
1.) Http 2.) HttpRequest 3.) HttpResponse
What are the key Salesforce data APIs that are available?
1.) REST API 2.) SOAP API 3.) Streaming API 4.) Bulk API
What methods exist for checking your API limit usage?
1.) Setup > Monitor > System Overview > API Usage 2.) Setup notifications to alert you when API limits are exceeded. This can be done under Setup > Monitor > API Usage Notifications. 3.) When using the REST or SOAP APIs, the LimitInfoHeader response header provides information regarding your remaining calls.
What are two ways to implement the Patch method with respect to defining the fields to be updated?
1.) Specify parameters in the method for each field to update. 2.) Pass the fields as JSON name/value pairs in the request body, deserialize the JSON string from the request body into a map of name/value pairs, and use the sObject PUT method to set the fields.
Describe the TreeSave REST resource.
1.) Up to 200 records can be created 2.) Parent and child relationships can be created with a nested tree structure (up to 5 levels deep) 3.) Up to 5 different object types
Describe the Batching REST resource.
1.) Up to 25 requests in a single batch 2.) Batches are performed serially, in order, which is preserved. 3.) Each request in a batch is separate from the rest. 4.) You can optionally choose to cease further requests when one request errors out, or allow subsequent requests to proceed (which is the default) 5.) A JSON object is returned, which contains an array of the results.
How many Apex Callouts can you make per transaction?
10
What is the default timeout for callouts or web service calls?
10 seconds
How many times will the Bulk API attempt to process a batch before permanently marking it as failed?
10 times
What is the max number of records you can include in a batch when using the Batch API?
10,000 records
What is the maximum number of callouts to an HTTP request or an API call that can be made from a single Apex transaction?
100 callouts
A call is considered long-running when it has been running for how long?
20 seconds or longer.
What status code is returned in the request when successful?
200
When a request is successful, what status code does the server send?
200
How many batches can you submit in rolling 24 hour periods when using the Batch API?
3,000
In order to avoid slowing down inbound call center sales agents, Universal Containers wants to de-duplicate Lead records against their 3rd-party MDM system after that the agent has served the record in Salesforce. What integration strategy should an Architect recommend? A. Outbound message to MDM with a callback to Salesforce to mark duplicate Leads. B. Sync the MDM system to a custom object in Salesforce and execute a Lookup validation rule against the object. C. Batch APEX process to de-duplicate all records first in Salesforce then against MDM, deleting the newest MDM record. D. Use Out-of-the-Box Lead De-duplication Rules to checkagainst MDM.
A
Which tool would an architect likely leverage while diagnosing issues with an inbound RESTful integration to Salesforce? A. Workbench B. Data Loader C. Force.com SOAP Explorer D. Metadata audit trail
A
Universal Containers(UC) has a legacy application that tracks customer order status once the order has been sent to the fulfillment department this legacy application does not easily provide an API to integrate with Customer service reps need to be able t access the data from within Sales force and cannot be given separate logins to the application, UC does not have single-sign-on enabled. How should an architect solve this problem? A. Leverage canvas to display the legacy application within Salesforce. B. use the Streaming API to receive order updates in real time. C. Migrate the legacy application to Heroku and Integrate the database. D. Create a web-tab in Salesforce directly to the legacy application.
A
Universal containers decided to use Salesforce sales cloud for their sales processes won Opportunities must be sent to external ERP system for order fulfillment. All the line items must also be sent along with Opportunities. The ERP system supports only SOAP- based messages for receiving orders What limitation of outbound messages might present a problem in this scenario? A. Outbound messaging does not support multiple objects B. Outbound messaging does not support SOAP C. Outbound messaging cannot be made secure D. Outbound messaging does not offer any reliability.
A
Universal containers has an ERP application where all customer orders are stored. There are millions of customer orders stored in the ERP application and a longtime customer may have thousands of individual orders. Additionally, some order informationmay house personally identifiable information that, due to company policy, can only be stored in ERP. Universal Containers would like the five most recent orders displayed on the account page in Salesforce How should an architect design this requirement considering both security and scalability? A. Leverage the REST API to receive orders from the ERP system as they are created. B. Leverage Salesforce Lightning Connect to display order information in Salesforce. C. write an outbound message to receive orders from ERP system as they are created. D. Build a scheduled ETL job to sync all customer order history in the orders object.
A
Universal containers is migrating to Salesforce from a legacy system with existing SMTP-based integrations. What Salesforce platform capability should an Integration Architect consider? A. Custom Apex class with webservice methods that implement the SMTP protocol. B. Custom InboundEmailHandler to process the messages. C. Lightning connect with an oData/SMTP interchange. D. Custom Apex batch job to check for SMTP messages.
A
When making an Apex callout, what approach should an Integration Architect recommend for securely transporting sensitive data from Salesforce over an unsecure network connection? A. Base64 encode the data before performing the call out from Apex. B. Encrypt the data with a shared key before performing the Apex callout. C. Use platform Encryption to secure the data before transporting. D. Salesforce automatically secures all data transmissions to external systems.
A
What is provided to third-party developers so that they can write integrations for your web services?
A WSDL file.
What is Open CTI?
A JavaScript API that lets you integrate third party CTI systems with Salesforce (no need to install software on your machine)
What does query() execute?
A SOQL query against a specified object and returns data that meets the criteria
What does search() execute?
A SOSL query. Note: Can return 200 records at MOST
What is outbound messaging?
A declarative solution for integrating your external system with Salesforce
What is a security token?
A generated key that provides user access to Salesforce from outside the org-wide IP Range (User can append to standard password) Note: Can only be applied for org-wide IP not profile
T/F Apex callouts can fire inside an Apex trigger.
False
What is the REST explorer?
A utility that gives access to the Force.com REST API
Universal containers is implementing Salesforce for the first time. As part of the implementation, approximately 10 Million contact records need to be migrated into the new environment. What tool should an architect recommend? A. Salesforce Data Loader B. Data Import Wizard C. Excel connector D. Salesforce Workbench
A(SINCE DATA LOADER CANNOT PROCESS MORE THAN 5 MILLION RECORDS)
T/F The Open CTI has separate Open CTI APIs for Classic and Lightning Experience.
False
Universal Containers has decided that they will be using the bulk API to migrate the existing data into Salesforce as they will be importing a total of 80 million records. While planning for the data migration, what techniques should the Architect recommend to make sure the load go according to schedule? Choose 2 answers A. Pre-process data that the triggers and workflows can be deactivated. B. Perform a test load using a full Sandbox prior to the Production load. C. Perform loads over a weekend server resource availability. D. Leverage several workstations, loading different objects simultaneously.
A, B
) What are two reasons an existing custom field cannot be marked as External ID? Choose 2 answers A. Maximum number of External IDs allowed on an object has been reached, B. Maximum number of fields of an object has been reached. C. Maximum number of skinny tables has been reached. D. Maximum number of indexes allowed on an object has been reached.
A, D
What are two benefits of named credentials? Choose 2 answers A. They simplify utilizing oAuth for Apex callouts. B. They Secure integrations to Salesforce from other systems. C. They enforce secure communication to external systems D. They securely store credentials in a maintainable way.
A, D
What are two scenarios that utilize the chatter REST API? Choose 2 answers A. When integrating chatter into custom mobile apps. B. When migrating Opportunity data. C. When uploading large files. D. When posting status updates to social media.
A, D
What are three capabilities of Salesforce outbound messaging? Choose 3 answers A. Provide a session ID as part of the outbound message. B. Repeatedly send a SOAP notification for up to 24 hours until an acknowledgement is received. C. Build integration components without the Use of APEX. D. Define a WSDL based upon 2 objects related via Master-Detaikls relationship. E. Define a custom WSDL based upon an Apex Interface class definition.
A,B,C
T/F Web service callouts can use REST
False
Universal Containers acquiresplanetary shipping and decides to migrate all customer contacts of planetary Shipping into Universal Containers Salesforce org Due to the lack of common unique identifier, they decide that a combination of first name, last name and street address could be used as a key to identify duplicate contacts. These three fields are populated on all contacts in both the systems. Which two methods should be considered to load contacts into Universal Containers org and avoid creation of duplicate contacts? Choose 2 answers A. Create a new text field to contain a hashed value for (first name+last name + street number) in Universal containers org and define it as External ID. B. Create an indexed formula field for (first name+last name + street number) so that a search can be done on the key before loading records. C. Create a new formula field for (first name+last name + street number) in universal containers org and use it as External ID. D. Create no new fields, but define the three fields (first name+last name + street number) as External IDs in universal Containers org.
A,B
Universal Containers would like to display data from an external system inside of Salesforce, and has chosen not to enable lightning Experience. They do not need the data for any other purposes within Salesforce. Which approach should an Integration Architect recommend that matches the Salesforce UI? Choose 2 answers A. An iFrame embedding a custom .Net application that displays data from the other systems. B. A custom visualforce page with a controller thats calls-out to the other systems. C. A custom Visualforce page with client- side calls out to the other systems. D. A middleware orchestration to continuously persist data from other systems into Salesforce.
A,B
Universal containers are building an integration between Salesforce and their data warehouse. The architect has the following requirements 1. Salesforce users need the ability to CRUD (create,read,update and delete) data from their data warehouse without leaving the Salesforce user interface 2.The integration to the data warehouse should maintain the same look and feel as the existing Salesforce user interface 3.The use of custom development Should be minimized Which two solutions should the architect consider? Choose two options A. Utilizelightning connect with custom ApexAdapter to provided CRUD access to the data warehouse B. Utilize a canvas application to render the data warehouse data from within Salesforce C. Utilize a visual force page from 3rd party JavaScript library that will provide CRUD capabilities to the data warehouse. D. Utilize a 3rd party tool from the App-Exchange that will provide CRUD capabilities between the data warehouse and salesforce
A,B
Universal containers would like to restrict access to Salesforce to only clients on their network Which two mechanisms should an Integration Architect utilize to prevent unauthorized clients? Choose 2 answers A. Configure Login IP Ranges on any profiles used by Integration B.Use a login flow to validate the IP and request a 2nd factor if incorrect C. Use a trigger to change the user's profile if their IP is not trusted. D. Enable the "Lock sessions to the IP address from which they originated" setting.
A,B
What are two benefits an Integration Architect should consider when recommending web-to-lead? Choose 2 answers A. Web-to-Lead requests have their own limits separate from other APIs. B. Web-to-Lead is a simple way to capture responses to marketing landing pages. C. Web-to-Lead can be utilized for Lead data migrations. D. web-to-Lead can be used to de-duplicate leads during integrations.
A,B
Universal Containers sells its products online using a system built on Force.com sites. The orders are captures and processed in Salesforce. the company uses an external marketing system and would like to make use of the customer data captured in Salesforce.The marketing system has REST API that can be used to push data into it. Which three options should a Technical Architect consider that do not require building custom web services on the marketing system? Choose 3 answers A. Write a custom Apex web service, Which will be called from the marketing system to retrieve customer data. B. Use Apex callout to send customer data from Salesforce to the marketing system C. Use a middleware tool to pull customer data from Salesforce and push it to the marketing system on adaily basis. D. Build a custom java application using the Enterprise WSDL to pull data from Salesforce and push it to the marketing system. E. Use outbound messages to send customer data from Salesforce to the marketing system.
A,B,E
Universal Containers decided to use Salesforce Sales Cloud for their sales processes. Won Opportuinities must be sent to an external source for Order fulfillment. All lint items must also be sent, along with opportunities. The ERP system has SOAP based web services orders. UC chose to use Apex callouts. Which two design trade-offs must be taken into account when using Apex callouts to SOAP base web services? Choose 2 answers A. Too many callouts resulting in exceeding the daily limit for number of callouts. B. Code changes may be required following upgrades to the ERP system. C. DML operations are not allowed right after Apex callouts. D. Appropriate error handling to retry failed messages.
A,C
Universal Containers is building a managed package to distribute on the AppExchange. As part of the solution they would like to include authentication information (username/password) inside of the package for web service calls made from the package Universal containers web services. A Salesforce security review has flagged this as a security violation and the architect must decide how best to protect these credentials Which two methods should the architect consider in order to protect these credentials? Choose 2 answers A. Utilize named credentials to store the username/password of the web service end post. B. Utilize a custom object with an encrypted text field to store the username/password of the web service end point. C. Utilize protected custom settings to store the username/password of the web service end point. D. Store the username/password directly in the Apex class that will be obfuscated in the managed package.
A,C
What are the two considerations of Apex REST services that an integration architect should keep in mind when building custom integrations? Choose 2 answers A. They cannot utilize publisher actions. B. They require unit and functional testing C. They cannot be built or maintained declaratively D. They consume more API limits than SOAP or REST API
A,C
Which two options should be considered to permit automatic retry of failed updates when loading data into Salesforce? Choose 2 answers A. Bulk API with serial option. B. Standard API with parallel option. C. Bulk API with parallel option. D. Standard API with serial option.
A,C
Universal Containers is building an integration between Salesforce and their Accounting system. The integration will utilize outbound messaging with call back pattern to Salesforce. The security officer would like to understand the authentication solution. What are the three ways that the call back can authenticate itself to Salesforce? Choose 3 answers A. Utilize the Enterprise WSDL login() operation to obtain a new session ID. B. Utilize an oAuth Username-Password flow to obtain a new oAuth token for the session ID. C. Utilize the REST API login() operation to obtain a new session ID D. Utilize the session ID contained within the outbound message notification as the authorization header. E. Utilize the partner WSDL with oAuth to obtain a valid oAuth token for the session ID.
A,C,D
As part of their customer setup process. Universal containers requires that any address put into Salesforce be validated by the US Postal Service. The customer must provide their address while they are on the phone with the Universal Containers representative. What two solutions should a Technical Architect recommend to fulfill this requirement? Choose 2 answers A. Implement a VisualForce page that validates entered addresses against an API. B. Write a trigger with an @future callout that validates addresses against an API. C. Build a custom Address object and a trigger that will validate the address against the object. D. Leverage an Appexchange application to validate addresses entered.
A,D
Universal Containers is using the enterprise WSDL to integrate their financial system to salesforce, while reading y=the release notes for the upcoming salesforce release the architect discovers a new object will be added to the salesforce data model that would be beneficial for the financial system integration. What two actions should the architect take to ensure the new object will be available to the financial system integration? Choose 2 answers A. Download the latest enterprise WSDL that contains the new object definition to generate Web service stubs for the new Salesforce object. B. Download the latest partner WSDL that contains the new object definition to generate web services stubs for the new salesforce object C. Migrate to the partner WSDL to generate a generic sObject service stub that can be leveraged for existing and future Salesforce objects D.Migrate to the metadata API to download the new salesforce sObject definition into the financial system integration.
A,D
Universal containers has built an integration module to pull customer support tickets out of various systems and push them to salesforce as cases. The integration was implemented using Salesforce SOAP API with batch size 200, and the jobs are scheduled to run every 30 minutes to make sure a job completes before the next job starts. After going Live, they found that jobs are failing occasionally due to a "Max CPU time exceeded" error thrown from a trigger on the case. Reducing the batch size to 100 would resolve the issue, but the jobs would then take an average of 35 minutes to run. Which two options should be considered to resolve the issue and make sure a job completes before the next one starts? Choose 2 answers A. No change to API options, and move the trigger code into a future method. B. No change to API options, and move the trigger code into a Queuetable apex C. Bulk API with serial option and batch size 100, and no code changes D. Bulk API with parallel option and batch size 100, and no code changes.
A,D
Universal containers is hearing complaints from users that recently released changes while they meet the functional requirements are not actually usable and/or do not meet their expectations for user experience for example, a Visualforce page that takes too long to display the first page of data. Which two types of testing should a technical Architect implement to reduce or eliminate the complaint? Choose 2 answers A. user Acceptance Testing B. Unit Testing C. Regression Testing D. Performance testing
A,D
What are two benefits of canvas that an Integration Architect should consider when exposing external systems from within Salesforce? Choose 2 Answers A. Canvas can provide authorization information via the signed Request. B. The canvas SDK can be used to make an external systems UI look like Salesforce. C. Canvas can send data to an external system asynchronously. D. Canvas endpoint URLs can be dynamically changed via a Lifecycle Handler.
A,D
What should an integration Architect consider when building a visulaforce page that makes client-side callouts to multiple domains that may violate the browser's same-origin policy? Choose 2 answers A. Setup CORS to whitelist all domains that the client scripts communicate with. B. utilize the canvas SDK to perform the callouts. C. Ensure each javascript resource communicates only with its origin. D. Set up Remote site settings for all domains that the client scripts communicate with.
A,D
In which three ways can production data be moved into a sandbox for testing purpose? A. Refresh a Full Sandbox. B. Use the metadata API. C. Request a Snapshot from Support D. Refresh a Copy Sandbox. E. use the Apex Data Loader.
A,D,E
What are the three capabilities of the Bulk API? Choose 3 answers A. process multiple batch jobs asynchronously B. Process multiple batch jobs synchronously C. Roll back all transactions within a batch of 10000 records D. Monitor job status via the API. E. Monitor job status via the Web UI.
A,D,E
How does Single sign-on work?
Authentication occurs on an external system that has a trusted relationship with SFDC
What profile permission is needed in order to integration with the API?
API Enabled.
T/F When subscribers identify a channel assigned to the PushTopic, the channel name is case insensitive.
False
T/F When using create() or update(), all records must be of the same sObject type.
False
What is transformation?
Ability to map one data format to another to ensure interoperability between various systems
Which HTTP header should you include in SOAP API requests to indicate the support of compression?
Accept-Encoding:gzip, deflate
How does Lightning Connect work?
Access external data without copying over it to Salesforce. Benefits no storage risks
What does @HttpPost do?
Action: Create Details: Creates records.
What does @HttpDelete do?
Action: Delete Details: Deletes records.
What does @HttpGet do?
Action: Read Details: Reads or retrieves records.
What does @HttpPatch do?
Action: Update Details: Typically used to update fields on existing records.
What does @HttpPut do?
Action: Upsert Details: Typically used to update existing records or create records.
What are session security levels?
Additional authentication that can be specified for reports, dashboards, or connected apps: standard and high assurance
Which key consideration should you make when using a trigger to make an Apex SOAP or HTTP (REST API) callout?
All calls from within the trigger context must be performed asynchronously
What is single-sign-on?
Allows users to access all authorized networks with one set of credentials
What is a Composite API
An API that combines existing API functions. A single request can perform multiple functions.
Which Apex callout should use whenever possible?
An HTTP Service
What does the SOAP contain?
An envelope, which contains a header and a body (the body might return the requested or response data; also may return a the fault)
What external data sources are supported through Lightning Connect?
Any data sources that can publish data in Open Data (OData) 2.0 protocol. Ex: Commercial Packages (SAP), DIY Data Producer (Java), Partners (Boomi, Informatica, etc.) Note: Uses External Objects
What is a mashup?
Any time we take data from an external system and combine it at the user interface level. (Ex: embedded Google Map)
What do Apex Callouts enable?
Apex Callouts enable invoking external web services that utilize SOAP, and WSDL or Rest services.
How are client applications accessing Salesforce through inbound integrations treated (security-wise)?
As Users
Should a callout be handled synchronously or asynchronously?
Asynchronously
What must you do before making a callout to an endpoint site in your code?
Authorize the endpoint URLs in Remote Site Settings.
Which protocol should an Integration Architect utilize to create a secure channel between Salesforce and other system? A. SMTP B. TLS C. SSH D. SFTP
B
Universal Containers has a batch integration that runs every five minutes to load Shipment records related to existing orders that have been updated in the previous five minutes. the integration is not reporting any errors, but some Shipment records are not being loaded. What could be the problem? A. Error reporting is not enabled in Salesforce. B. The integration takes more than five minutes to run. C. The integration is causing UC to exceedits API limits D. The Integration cannot find the parent orders for some Shipments.
B
Universal Containers has built an integration using the SOAP API to load records from a back-office system into Salesforce. The records created in the back-office system must be loaded into Salesforce in almost real time, so a custommodule was written to identify CRUD events in the back-office system and perform sync with Salesforce. UC has several other systems that integrate with Salesforce through the SOAP API using separate integration users. What is a risk involved with this sort of integration? A. Too many concurrent sessions B. Reaching an API call limit. C. Reaching a logins per Day limit. D. Too many record-lock errors
B
Universal Containers has decidedthat acquisition of other companies will be a key focus of their growth for the next several years. All acquired customer service agents will use UC's pre-existing customer support process built in Salesforce. the ERP application at any acquired company will not be immediately replaced, and customer service agents must be able to see up-to-date order status from all ERP systems. What recommendation should a technical Architect make to minimize complexity during new acquisitions? A. Use custom Linksto direct users to the appropriate ERP system to view order status. B. Build all Integrations as nightly ETL batches to minimize real-time overhead. C. Leverage Apex callouts to integrate directly with acquired applications. D. Use an ESB to abstract the Salesforce integration from other enterprise applications.
B
Universal Containers has just purchased large volume of contact data from an external vendor. The head of sales would like to use the new data set within the existing production org. The production org currently contains a large volume of contacts. What should an Architect recommend to prevent data duplication in salesforce? A. Load the data into salesforce and then utilize the contact Duplicate Rule feature B. Utilize an off-platform de-duplication tool prior to loading. C. Create a de-duplication trigger before loading the data. D. Utilize a batch apex process to de-duplicate the data after loading.
B
Universal Containers is building a native mobile application that queries and updates data in their Salesforce in real time What statement is correct about the Salesforce APIs? A. Enterprise WSDL minimizes payload size. B. Rest API supports oAuth C. Enterprise WSDL supports WS-Security D. REST API supports WS-Security.
B
Universal Containers is currently doing User Acceptance Testing for small changes in a Developer sandbox. Users are complaining that allow release to production, some functionality is broken and performance is often negatively impacted. What is causing these complaints? A. Users should be testing in a Partial Sandbox in order to replicate Production functionality and performance characteristics. B. Users should be testing in a Full Sandbox in order to replicate Production functionality and performance characteristics. C. Users should be testing with date loaded into the Developer sandbox in order to replication Production functionality and performance, characteristics. D. Users should be testing in a Developer Pro sandbox in order to replicate Production functionality and performance characteristics.
B
Universal Containers wants to ensure Salesforce will only accept secure connections from their ETL tool. How should calls to a custom Apex web service be secured? A. VPN B. Two-way SSL C. Profile Security D. IP Whitelisting
B
Universal containers is building an integration between their instance of Salesforce and their business partner's fulfillment systems, the security officer would like to ensure that only the authorized data for each business partner is accessible across all interfaces. How should the architect ensure this requirement is met? A. provide each business partner a shared integration username/password with a specific role/profile provisioned to the appropriate data. B. Provide each business partner their own username/password with a specific role/profile provisioned to the appropriate data. C. Provide each business partner their own username/password with an Apex custom web service to filter the data appropriately. D. Provide each business partner their own username/password with a shared integration profile provisioned to the appropriate data.
B
Universal containers merges with planetary shipping both companies use Salesforce for order processing and they decide to consolidate for processes. universal containers has well-established channels for receiving orders, so they decide to use Universal containers org for receiving and pre-processing of orders and Planetary Shipping's org for processing and fulfillment of orders. What is the best way to integrate the business processes of the companies? A. Use Apex callout to push orders from universal Containers to Planetary Shipping B. Use salesforce-to-Salesforce integration between Universal containers and Planetary shipping C. Use Outbound messages to send orders from Universal Containers to Planetary shipping. D. Use a Middleware tool to pull orders from Universal Containers and push to Planetary Shipping.
B
Universal containers ships millions of orders per year and releases code fixes to the production org mightily. Their corporate testing strategy requires that tests must be performed against Production data in an isolated test environment before code can be released to production. How can Universal Containers achieve the requirement? A. Use Salesforce-to- Salesforce to keep data synchronized between production and full sandboxes. B. Utilize a middleware solution and batch API to do a nightly synch from production to Full sandbox. C. Create APEX unit tests so testing can be done against Production data, but rolled back before being committed. D. Request that Salesforce to schedule a full sandbox refresh on a nightly basis.
B
Universal containers uses a legacy system to receive and handle Level 1 service requests, and Salesforce service Cloud for Level2 requests and above, Cases will be pushed from the legacy system to Service Cloud by a nightly batch process. Once the cases are closed in SF, the case needs to be updated in the legacy system as soon as possible. How should the Technical Architect recommend that case status be updated in the legacy system? A. Use Apex callout to send case status from Salesforce to the legacy system. B. use Outbound messages to send status updates from Salesforce to the legacy system. C. Use a middleware tool to pull case status from Salesforce and push to the legacy system at regular intervals. D. Write an Apex web service returning case status, to be called from the legacy system.
B
Universal containers built an integration using the Bulk API to load records from a legacy system into Salesforce, Parallel option with batch size 1000 was used However, the batches often fail due to " Max CPU time exceeded"errors which could be resolved with a Similar batch size. What are two risks involved with batch sizes that are too small? Choose 2 answers A. Possibilityof hitting the daily limit for number of batches. B. possibility of very long bulk job execution times C. Possibility of failures due to record-locking errors. D. Possibility of hitting the "Too many concurrent batches" limit.
B,C
Universal Containers has an integration that runs nightly to update the Product (Product2) object in Salesforce with updated product availability for over 500,000 products. The source system is green screen ERP that must be taken offline to produce nightly production reports such as the inventory availability report used for this integration. The Salesforce integration frequently reports failures due to data validation errors. Which two steps should the Technical Architect should recommend? Choose 2 answers A. Ask the ERP report designers to redesign the report to provide properly formatted data. B. Implements a regression testing policy to detect issues following development. C. Use SOAP headers to turn off validation rules and triggers during the integration. D. Review the Salesforce data model and Validation rules and modify the integration as necessary.
B, D
Which two statements are correct about External ID? Choose 2 answers A. External IDs must be Text fields B. External IDs are always searchable C. External IDs fields are always unique D. External IDs can be used to upsert records
B, D (External ID fields are searchable and can be used for upsert)
The Integration Team at Universal Containers is frustrated because the developers keep changing the data model and trigger behaviors during development, resulting in frequent rework and unexpected bugs lade in the development process. What two recommendations should a Technical Architect make to resolve this issue? Choose 2 answers A. Implement a Regression Testing policy to catch issues earlier in the development process. B. Use a requirements traceability matrix to track data model changes back to the requirement that prompted them. C. Implement a continuous Integration process to identify issues earlier in the development process. D. Encourage code developers and integration developers to work in separate sandboxes.
B,C
Universal Containers would like to update their accounting system every time an opportunity is changed to Closed-Won their accounting system occasionally is offline for 3-4 hours to support month-end processing, and they would like the integration design to ensure that no transactions are lost during this down time. Which two integration designs should the architect consider? Choose 2 answers A.Utilize the enterprise WSDL to query Salesforce from the Accounting system for opportunities that have changed to Closed-Won. B. Utilize an Enterprise Service Bus to the web service calls between Salesforce and the accounting System. C. Utilize workflow outbound messaging, which has a built-in queuing framework. D. Utilize an Apex trigger with an @future class to callout to the accounting system after the month-end processing is complete.
B,C
Universal containers utilizes the REST API to update the multiple Salesforce objects in real time based upon changes from their ERP system. They recently started encountering API Limits and have consulted the Integration Architect on possible solutions. What two possible strategies should the architect consider? Choose 2 answers A. Migrate the integration to the partner WSDL to support 200 DML operations in a single API call. B. Migrate the integration to the Bulk API which does not count towards the API limits. C. Utilize the REST API batch URI to consolidate 100 DML operations into single API call. D. Utilize workflow outbound messaging which does not count towards the API limits.
B,C
Which two approaches should an Integration Architect recommend to allow access to on-premise systems by Salesforce? Choose 2 answers A. Place the systems in aDMZ. B. Whitelist Salesforce IPs on the firewall. C. Utilize two-way(mutual) SSL D. Whitelist the corporate IPS in Salesforce.
B,C
Universal Containers has a SOAP-based integration that runs nightly to update the Product(Product2) object in Salesforce with updated product availability for over 500,000 products. The source system is a green-screen ERP that must be taken offline to produce nightly production reports, such as the inventory availability report used for this integration. The integration is performing very slowly and does not complete within the allocated four-hour time slot. What three recommendations might a Technical Architect make to resolve this issue? Choose 3 answers A. Use outbound Messaging to notify Salesforce promptly when product availability changes in the source system. B. Store the Salesforce Product ID in the source system to eliminate the need for External IDs and UPSERT API calls. C. Pre-process the data to avoid the need for workflow rules or triggers D. Use the Bulk API UPDATE or UPSERT records more efficiently. E. Contact Salesforce support to request that they turn off record locking on the Product2 object.
B,C,D
Universal Containers has a requirement to query all Account records within Salesforce that were updated in the last 24 hours and download those Accounts to their data warehouse on a nightly basis. They expect the volume of records to be between 500-1500 records per day. What three techniques should an Architect consider ? Choose 3 answers A. Leverage a time-based workflow action to trigger an account outbound message notification for all records updated within the last 24 hours. B. Leverage the Enterprise WSDL getUpdated() operation to retrieve Account records updated within the last 24 hours. C. Leverage the Salesforce Data Replication API getUpdated() operation to retrieve Accounts records updated within the last 24 hours. D. Leverage a third party tool ETL with a dynamic changing SOQL to retrieve Accounts updated within the last 24 hours. E. Leverage the REST API / sObjects / Account / updated URI to retrieve Accounts records updated within the last 24 hours.
B,C,D
Universal Containers has an Outbound messaging-Based integration that posts closed opportunities to an ERP system for fulfillment in 1% of the test cases, the integration creates multiple orders for a closed opportunity Which three steps should a Technical Architect take to diagnose the issue? Choose 3 answers A. Review the firewall logs to make sure that the outbound messages are being delivered. B. Review the Enterprise Service Bus logs to make sure that successful orders are being acknowledged C. Review at the outbound Messaging Deliverystatus logs to make sure that the messages are being delivered and acknowledged by the target system. D. Review the Enterprise Service Bus logs t make sure that orders are being created only one time. E. Review at the outbound Messaging Audit logs to make sure that the messages are being successfullyprocessed by the target system.
B,C,D
What are three capabilities of Salesforce Lightning Connect? Choose 3 answers. A. Write to OData - Compliant data sources without APEX. B. Read from OData - Compliant data sources without APEX. C. Associate external object records to Salesforce Account records. D. Write triggers and workflows on external objects. E. Write SOQL queries on external object.
B,C,E
What are three capabilities of Salesforce to Salesforce(S2S)? Choose 3 answers A. Share reports and dashboards between Salesforce orgs. B. Automatically publish data from the publisher org. C. Manually consume data into the consumer org. D. Integrate data between Salesforce orgs via pre-built web service adapters. E. Publish data from the publisher's Account object to the consumer's Customer__c object.
B,C,E
Universal containers has used Outbound Messaging to integrate with their billing system. Their billing system has frequent outages that don't last more than a couple of hours. Which two aspects of Outbound Messaging might the customer experience issues with as a result of these outages? Choose 2 answers A. Out-of-order delivery. B.Duplicate messages C. Orphaned Requests D. Exceeding Governor Limits.
B,D
Universal Container needs to integrate Salesforcewith several home-grown systems. These systems require custom code to be written in order to integrate with them, and the CIO argues that if custom code needs to be written, then there is no reason to invest in middleware Which three considerations should an Architect bring up to the CIO? Choose 3 answers A. Performance B. Error Handling C. Bulkification D. Orchestration E. Logging
B,D,E
Universal Containers would like to integrate Salesforce to their Accounting system. Salesforce must notify the accounting system for every new account that has been created. The security team will not allow Salesforce to integrate directly to the accounting system due to potential security issues. Which three stages should the Architect consider to reduce the security concerns for this Integration use case? Choose 3 answers A. Terminate the SSL connection at a reverse proxy in the DMZ which establishes trust in the connection using mutual SSL. B. Enable WS-security for the web services made between Salesforce and the accounting system. C. Whitelist the Salesforce IP range on the firewall to ensure only Salesforce- originated traffic can penetrate the network. D. Utilize an Enterprise Service Bus to ensure Accounting system credentials are not stores within Salesforce. E. Enable platform encryption in the Salesforce org to ensure network communication to the Accounting system is encrypted.
B,D,E
What are standard controllers?
Provide access to data and standard behavior (like save, edit, and delete)
Which integration pattern should you use in the following scenario: A company has a batch process that assigns prospects to reps. The info needs to be imported into Salesforce on a nightly basis?
Batch Data Synchronization
When performing an HTTP POST method callout, what additional information do you provide?
Body
What happens in two-way TLS?
Both client and server present a certificate to prove their identity. A mutually-trusted certificate authority signs the certificate. Salesforce only accepts signed by a commercial, trusted certificate authority (CA)
If you need to backup an object with large volumes (greater than 2M) or do a backup that raises performance issues, which API should you use?
Bulk API
If you need to preserve governor limits regarding the number of API calls in your backup solution, which API should you use?
Bulk API
In what order can DML statements and Callouts be made?
By default, Callouts cannot be made after DML statements in the same transaction. DML statements that come after Callouts are allowed.
How are commits handled when using the SOAP API?
By default, records without errors are committed and records with errors are not committed automatically. You can utilize the AllorNoneHeader to roll back all changes unless ALL records are processed successfully.
How can we cover the code of our callouts in our test classes and methods?
By implementing a mock callout and response.
Universal containers has a simple co -premise web app that is unauthenticated. What capability should an integration Architect recommend to make the app accessible from within Salesforce? A. Apex callout B. Visualforce C. Custom Web tab D. Lightning connect
C
Universal Containers has a customer setup process that relies on external database to send customers welcome & registration emails. When a customer contacts Universal containers via phone they need to receive the welcome email shortly following the conversation with the UC representative. Universal containers representatives work exclusively in Salesforce and any new customer contacts are created in Salesforce by the representative. The external database exposes a SOAP API for integration with other applications. What Salesforce technology best fulfills this requirement? A. Write a nightly batch synchronization to send customer information to the external database. B. Write an outbound message to send customer Information to an ESB. C. Write an outbound message to send customer Information to the external database. D. Write a trigger with an @future method to send customer Information to the external database
C
Universal Containers has chosen Salesforce Wave as their Analytics Platform. There is a requirement to join data from multiple systems(including Salesforce) to be displayed in a single Wave Lens. What should the Architect recommend? A. Use an ETL tool to load the data into Salesforce, upserts to ensure that the data in properly joined. B. Use Data flow to load Salesforce data, and an ETL tool to load other data sets. C. Use an ETL tool to join multiple sources and load them into a single data set. D. Use data flow to load Salesforce data,and lightning connect to access the other data sets in real time.
C
Universal Containers has two integrations to Salesforce; System A requires read-only access to all Opportunity data while System B requires read-write access to all Accounts. Which approach ensures compliance with the principal of least priviledge? A. Utilize a single "Integration User" with the "Modify All data" profile setting enabled so that all integrations always have access to all data. B. Utilize separate credentials and profiles for each integration, one having "view All" to ties and the other having "Modify All" to Accounts. C. Use a single "Integration User" with profile settings restricted to "view All" for opportunity and "Modify All" for Accounts. D. Utilize separate credentials for each system with both credentials having the "modify all data" permission on the profile.
C
Universal Containers is building a mobile application that connects to Salesforce for reading and updating data What is the appropriate authentication solution? A. Create a mobile Integration user ID whose credentials are stored within the mobile application code. B. Prompt for the mobile user's username and Password; utilize the oAuth Username-Password flow to obtain an oAuth token. C. Redirect to Salesforce via the User-agent oAuth flow to obtain an access token and refresh token. D. Prompt for the mobile user's username and password; utilize the Enterprise WSDL login() operation to obtain a session ID.
C
Universal Containers is hearing complaints from users that recently released changes arebreaking existing functionality. What type of testing program should a Technical Architect implement to reduce or eliminate this complaint? A. Performance Testing B. Unit Testing C .Regression Testing D. User Acceptance Testing
C
Universal Containers wishes to move data between 3 back office systems: ERP, financial and a legacy home-grown shipping system that will be replaced 3 months after integration is scheduled to be complete. What integration pattern should an architect recommend to ensure minimal throwaway code? A. point-to-point B. Web Mashup C. MiddleWare D. Apex batch Processing
C
Universal Containers would like to integrate to an external system from Salesforce over a secure channel howeverthe external system does not support HTTP-basic authentication What approach should an integration Architect recommend that enables the external system to trust the data being received? A. Digitally sign the Payload using a private key trusted by the external system. B.Include a secret passphrase in the payload that is a validated by the external system. C. Base64 encode the data to ensure untrusted 3rd parties don't see it. D. Utilize a 3rd-party SSO solution to authenticate the session.
C
Universal containers has an integration that runs nightly to update the product(product2) object in Salesforce with updated product availability for over 500,000 products. Occasionally(less than 1 time per month) a product record fails to update due to a data validation issue that cannot be predicted in advance. How should universal Containers monitor this nightly batch import of data into Salesforce so that any error can be corrected promptly? A. Configure an Enterprise Server Monitoring tool to process ETL success and failure logs. B. Configure Salesforce to email an administrator when Bulk API batches fail. C. Monitor the Bulk Data Load Jobs page daily for failed batches D. Configure the ETL middleware to notify an administrator via email when a record update fails.
C
Universal containers is building an integration from their employee portal to salesforce Chatter.They would like their employee portal to read and write to the Chatter API on behalf of the employee using the portal. What is the correct way to authenticate to the chatter API to meet this requirement? A. Use oAuth to authorize the portal to access the chatter API on behalf of the user. B. Use oAuth Which will pass their portal credentials to the chatter API. C. Use a chatter API integration user which authenticates to salesforce using oAuth. D. Use a chatter API integration user which authenticatesto Salesforce using Enterprise WSDL login().
C
Universal containers(UC) leverages the standard opportunity and opportunity product objects to manage their orders in Salesforce. When a deal is closed, all opportunity information, including products and billing contacts, must be send to their ERP application for order fulfillment. As UC has an "express shipping" guarantee, leadership would like order information sent to ERP as quickly as possible after the deal is closed? How should an Architect fulfill this requirement? A. Write a nightly batch job to send customer information to ERP. B. Write a visualforce page to send order information to ERP. C. Write an opportunity trigger to send order information to ERP. D. Write an outbound message to send order information to ERP.
C
What Salesforce technology should an Integration Architect consider when needing to securely expose an external system User Interface from within the Salesforce UI and provide that system with information about the user? A. Visualforce B. Custom Web Tab C. Canvas D. Lightning Component
C
What capability should an Integration Architect consider if there is a need to synchronize data changed in Salesforce to a 3rd party with a JSON-based API endpoint? A. Use an outbound Message with the record's data. B.Use lightning connect to save the data to an external object. C. Use an Apex class to perform the REST callout asynchronously. D. use the REST API with the content-Type headerset to "JSON."
C
Universal Containers has a requirement for users of a Validation page to be notified of data updates from Salesforce as well as message from other systems in real time. Which three approaches should be considered when selecting the correct API? Choose 3 answers A. REST API to continuously poll Salesforce for updates to records. B. Generic Streaming API to support notifications coming from other systems. C. Streaming API to support push notifications to users on mobile devices using Salesforce1. D. Utilize ActionPoller to perform an Apex Callout to the external system to retrieve data. E. Streaming API to support real-time data updates by other users within Salesforce.
C, D, E
try Universal Containers is planning a data migration into Salesforce and must decide whether to use the Bulk API or the SOAP API. Which three statements are true about the Bulk API and REST API? Choose 3 answers A. DML limits on Bulk are not governed on Salesforce servers. B. The SOAP API provides jpb monitoring on the Salesforce setup menu. C. The Bulk API allows multiple attachments to be leaded from within a single ZIP file. D. The SOAP API avoids record locking contention on parent objects of Master-Details relationship. E. The Bulk API may cause record locking contension on parent objects od Master-Details relationship.
C, D, E
What are two considerations to make when performing SOAP callouts from within Apex? Choose 2 answers A. SOAP callouts consume API limits. B. WSDL2Apex supports RPC-style SOAP callouts. C. WSDL2Apex can be used to generate stub code. D. SOAP callouts cannot occur after any DML statements.
C,D
Which two automated methods should an architect use to solve an issue with duplicate contacts? Choose 2 answers A. Write a Batch Apex class to manage the deduplication B. Assign new contacts to queues to be reviewed by a data quality team. C. Leverage an AppExchange data management toolto de-duplicate contacts. D. Enable duplicate management in the org to prevent duplicates.
C,D
What are the two types of API limits?
Concurrent limits and Total limits.
What are Concurrent limits?
Concurrent limits cap the number of long-running calls that are running at one time?
Applications using the Force.com must be configured as what in SFDC?
Connected App
HTTP POST method
Create a resource or post data to the server
What does the POST HTTP method do?
Create a resource or post data to the server
HTTP PUT method
Create or replace the resource sent in the request body
What does the PUT HTTP method do?
Create or replace the resource sent in the request body
What does the POST method do?
Creates record
What is Apex REST?
Custom development. You can build your own REST resources to perform custom business logic.
A system at Universal Containers needs to retrieve opportunity details(including line items and opportunity learn) and then update the opportunity with new information in real time, as one atomic operation. What approach should an architect recommend that conserves API limits? A. Use a publisher action to update the data and callback to the other system. B. Use the generic streaming API to publish changes and listen for updates. C. Use the SOAP API to upsert the data. The API will then return all opportunity details. D. Use a custom Apex class with a webservice method that performs both actions.
D
An insurance company decides to build an online portal using the Salesforce platform for receiving quote requests from customers. The company has a legacy quoting system that will generate quotes while the rest of the sales process is managed by Salesforce Sales Cloud. The legacy system has an API for creating quotes. What Implementation method should be used so that customers can request quotes online and receive them in real time? A. Middleware tool to pull quote requests from SF and push to the legacy system. B. Trigger with an @Future method to send quote requests to the legacy system. C.Outbound message to send quote requests from Salesforce to the legacy system. D. Apex callout to send quote requests from Salesforce to the legacy System.
D
Universal Containers has a trigger on the Order object to update the parent Acount with the date and time of the last closed Opportunity. An integration that inserts orders for the high-volume customers is failing periodically, with no obvious pattern to the timing of failures. What could be the cause of this issue ? A. The trigger is failing Unit Tests that access the new data. B. API limits being limited. C. Data skew is causing record locking issues on the Oder Share object. D. Record locking contention on the parent Account.
D
Universal Containers has multiple Salesforce orgs as a result of a number of acquisitions over time. They decide to let the subsidiaries continue using their own orgs but would like to streamline their lead processing. They identified one org that would act as a gateway to receive all the leads for the group and then distribute them to subsidiary orgs based on lead type. Changes to lead status in subsidiary orgs must be reflected in the gateway org They decide to use Salesforce-to-Salesforce for lead distribution. What limitation of Salesforce-to-Salesforce must be considered to ensure searchless two-way integration? A. Salesforce-to-Salesforce has no built-in support bi-directional(two-way) integrations. B. Salesforce-to-Salesforce has a limit on number of records shared between systems. C. salesforce-to-Salesforce does not support linking/sharing with existing records in a receiving org. D. salesforce-to-Salesforce has no built-in support for objects with Parent-child relationships.
D
Universal Containers is replacing a home-grown CRM system. Currently, a .Net application runs a batch process to query the CRM system nightly and create a CSV file that is picked up via SFTP and loaded to a SQL database. What technology should an architect use to minimize custom development when replacing the CRM system with Salesforce? A. Outbound messaging B. APEX Batch C. APEX Callout D. Middleware
D
Universal Containers manages a catalog of over one million products that it makes available to its customers. The master product catalog is stored and managed in their ERP application with frequent updates made to the product catalog by their sourcing team. The sourcing team may update attributes such as price, general catalog availability, and the product description. When the sourcing team makes an update that change must go into effect during the next business day and there may be thousands of changes made over the course of the day. What integration pattern would you recommend to best manage this scenario? A. Write a custom web service to accept product catalog changes from ERP. B. Use the streaming API to receive product changes in real time from ERP. C. Write an outbound message to send product changes in real time from ERP. D. Build a scheduled ETL job to sync products on a nightly basis from ERP.
D
Universal Containers wishes to validate street addresses in Salesforce against their legacy Accounting system,Which is the system of record. Retrieving an Account record in this system takes 7-12 seconds per query, and the address must be validated as quickly as possible to ensure proper order processing. What integration pattern should an Architect suggest? A. Remote Invocation initiated by Middleware B. @Future method with an Apex callout. C. Nightly batch validating records modified the previous day. D. Outbound Message with a Callback.
D
Universal containers has complex data transformation, error handling and process automation requirements as part of their integration strategy. What technology should an Architect recommend in order to minimize Salesforce code customizations? A.Data Loader B.Canvas C.Process Builder D.Middleware
D
Which mechanism should an Integration Architect recommend to make a secure, authenticated connection to a remote system that results in the remote system trusting Salesforce? A. Encrypt the Payload with a shared key. B. Use a pre-shared key in a query parameter. C. Implement two way (or mutual) SSL certificates. D. Utilize CA - signed certificates on the host.
D
Which API is particularly adapted to the Incremental Backup Type?
Data Replication API
How does a Remote Call-In work?
Data stored in SFDC is created, retrieved, updated, or deleted by a remote system.
How can you expose an Apex class as a SOAP web service?
Define your class as a global class. Define your methods as webservice static methods using the "webservice" and "static" keywords.
HTTP DELETE method
Delete a resource identified by a URL
What does the DELETE HTTP method do?
Delete a resource identified by a URL
How often are the Salesforce APIs changed?
Each release
What does a remote site enable?
Enables a VF page, s-control, Apex callout, or JavaScript code to call an external site. Without registering the site first, the call would fail.
What can you view when monitoring bulk data load jobs in the setup menu?
End Time, Job ID, Object, Operation, Progress, Records Processed, Start Time, Status, Submitted By, Time to Complete
SOAP web services are commonly used for...
Enterprise apps that require a formal exchange format or stateful operations.
How many calls can you make in 24 hours? (excluding outbound messaging and apex callouts)
Enterprise/Pro = 1000 x number of users Ultimate/Performance = 5000x number of users
How frequently does the Salesforce server check for new notifications when the Streaming API is in use?
Every three seconds
How can you expose an Apex class as a REST web service?
Expose your class as a global class, and expose your methods as global static methods. Add annotations to your class and methods as follows: @RestResource(urlMapping='/Account/*') global with sharing class MyRestResource { @HttpGet global static Account getRecord() { // Add your code } }
T/F SOAP API calls are asynchronous.
False (They are synchronous)
T/F Enterprise WSDL is typically leveraged by Partners.
False, typically used for Customers
Where do you download your WSDL?
For Partner or Enterprise: Your Name > Setup > Develop > Api > Generate Enterprise/Partner WSDL For custom: Your Name > Setup > Develop > Apex Classes
How can you implement versioning with your Apex web services and API endpoints?
For example, you could create two classes specifying URL mappings of "/Cases/v1/" and "/Cases/v2/" to implement this functionality.
What is middleware?
Functions as an intermediate layer between systems
Four common types of HTTP methods
GET, POST, DELETE, PUT
Which type should be used whenever possible, and why?
HTTP Callouts. Easier to interact with, much less code, and utilize easily readable JSON.
What is a recommended practice with respect to Apex API endpoints?
Implement versioning so that you can provide upgrades without breaking or changing existing functionality.
How can you insert test data in your test class before making a mock callout if callouts after DML statements are not allowed?
Insert your test data first, outside of the Test.startTest and Test.stopTest statements. Make sure your callout takes place between the Test.startTest and Test.stopTest statements.
What is long polling?
It emulates an information push from a server to a client to keep the connection active
What is a key characteristic of integrations that take place at the application level?
Leverage interfaces, like APIs, to allow interaction with external data and business processes
What is JSON?
Light weight text based format used to transport data from web app to server. Supports UTF-8 and ISO8601
What is a client presentation mashup?
Live data and functionality embedded on a web page (typically include HTML, AJAX or Flash, and usually prepackaged)
What considerations should you make for outbound integrations?
Make sure to configure proxies and firewalls to enable Salesforce to access the external system
What considerations should you make for inbound integrations?
Make sure to identify all proxies and firewalls that need to be negotiated
Which permissions does a user need to manage the Salesforce to Salesforce connection?
Manage Connections
What is OAuth?
Mechanism to authorize external applications, like mobile or desktop app, to access force.com resources Note: Doesn't reveal user's credentials
What is mediation routing?
Mediators coordinate a group of objects, so that they don't need to know how to coordinate with each other.
If you need to backup Metadata, which API should you use?
Metadata API
What is the REST API best used for?
Mobile or browser applications that do not need access to high volumes of data.
How must an OAuth request be registered in Salesforce?`
Must be registered as a Connected App. Note: provides a consumer secret key to be used by external app
Will the Bulk API reprocess failed records?
No
At what level is session security defined?
Org-wide level
When is Two-way TLS required?
Outbound integrations
Whenever possible, use this to handle integration solutions.
Outbound messaging.
What are synchronous transport protocols?
Protocols that support activities where a single thread in the caller sends the request message, blocks to wait for the reply message, then processes the reply. The request thread waiting for a response means that there may only be one outstanding request.
What are asynchronous transport protocols?
Protocols that support activities where one thread in the caller sends the request message and sets up a callback for the reply. A separate thread listens for reply messages. When a reply message arrives, the reply thread invokes the appropriate callback, which reestablishes the caller's context and processes the reply. The approach enables multiple outstanding outbound requests.
Where can an admin define that two-factor authentication is required for a given user?
Profile, "Two-Factor Authentication for User Interface Logins"
Which model is used by the Streaming API?
Publish/Subscribe model
What is event handling?
Receipt of an identifiable occurrence at a designated receiver. Key processes include: 1) Identifying where an event should be forwarded 2) Executing the forwarding action 3) Receiving a forwarded event 4) Taking some kind of action in response
Which integration pattern should you use in the following scenario: When an Opportunity is Closed Won, the creation of an order is initiated. The data master for the Order is the ERP system. The order must be saved to the Opportunity record?
Remote Process Invocation - Fire and Forget
Which integration pattern should be used in the following scenario: You want to display billing history for a customer account without storing billing history in SFDC. They have a web service with the billing details, BUT can't display the data in the browser?
Remote Process Invocation - Request and Reply
What must be registered before a callout is made by Visualforce or Apex to an external site?
Remote site must be registered. Can be registered under Remote Site or Named Credentials
Describe the process of Orchestration using Composite APIs
Responses from one API method can be used as inputs for another API method. Multiple APIs can be used in a single call to improve performance.
HTTP GET method
Retrieve data identified by a URL
What does the GET HTTP method do?
Retrieve data identified by a URL
What does the queryMore() execute?
Retrieves next batch of objects returned from the query (when query results in more records than the API can return)
What does retrieve() execute?
Retrieves one or more objects based on the specified object IDs (used in conjunction with getDeleted() and getUpdated())
What does the HEAD method do?
Retrieves resource metadata
What does getDeleted() execute?
Returns a list of records that have been deleted within a given time frame for a specified object (returns ID and Data/Time deleted)
What does getUpdated() execute?
Returns a list of records that have been updated within a given time frame for a specified object (only ID returned; can use retrieve() to get more details)
What transport security does Salesforce offer?
SSL (secure sockets layer) provides transport security
What is Security Sockets Layer (SSL)?
SSL allows a server to authenticate itself to a client and vice versa. Also ensures user communication isn't intercepted by a malicious third party. Useful because a user visiting a site over HTTP has no assurance they are interacting with the legitimate site.
How does Remote Process Invocation - Request and Reply work?
Salesforce invokes a process on a remote system, waits for the process to complete, and then tracks state based on the response
What is the main advantage of a named credential?
Salesforce handles the authentication for you!
How does Remote Process Invocation - Fire and Forget work?
Salesforce invokes a process on a remote system, but doesn't wait for the process to complete. Remote process receives and acknowledges request. Then gives control back to Salesforce.
What is the "Same Origin" policy?
Same origin policy is a web standard that doesn't allow apps from different domains to interact and exchange data. Purpose is to protect the end user data.
When you want to receive notifications for changes to data that match a SOQL query you define, which API should you use?
Streaming API
What method is used in a test class to inform the runtime that mock callouts are used in the test?
Test.setMock
Similar to DML, asynchronous Apex operations result in pending uncommitted work that prevents callouts from being performed later in the same transaction. How can you handle asynchronous operations and mock callouts in your test classes/methods?
Test.startTest(); MyClass.asyncCall(); Test.stopTest(); Test.setMock(..); // Takes two arguments MyClass.mockCallout();
WSDL2Apex is also known as...
The "Generate from WSDL" button under Setup > Develop > Apex Classes.
Describe the Bulk API.
The Bulk API is a specialized RESTful API for loading and querying lots of data at once. The Bulk API is asynchronous. The Bulk API is great for performing tasks that involve a large volume of records, such as loading data into your Salesforce org for the first time.
Describe the REST API. What can you do with the REST API? When should you use the REST API?
The REST API is a simple, yet powerful, web service based on RESTful principles. It exposes Salesforce functionality via REST resources and HTTP methods. With the REST API, you can perform the following: 1.) Create, Read, Edit, and Delete Salesforce records 2.) Query for Salesforce records 3.) Retrieve Salesforce object metadata 4.) Access information about limits in your org. The REST API has a lightweight request and response framework, and is easy to use. As a result, it is a great option for writing mobile and web apps.
Describe the SOAP API. What is it best used for?
The SOAP API is a powerful and robust web service based on the industry-standard SOAP protocol. It uses a Web Service Description Language (WSDL) file to rigorously define the parameters for accessing data through the API. Most of the SOAP API functionality is also available via the REST API. It just depends on which one better meets your needs. Because the SOAP API uses the WSDL as a formal contract between the API and the consumer, it is great for writing server-to-server integrations.
Describe the Streaming API.
The Streaming API is a specialized API for setting up notifications that trigger when changes are made to your data. It uses a publish-subscribe, or pub/sub, model in which users can subscribe to channels that broadcast certain types of data changes. The pub/sub model reduces the number of API requests by eliminating the need for polling. The Streaming API is great for writing apps that would otherwise need to frequently poll for changes.
What are security considerations with respect to using the Salesforce SOAP or REST APIs, or Apex Web Services?
The security context under which Apex web service methods run differs from the security context of Salesforce APIs. Unlike Salesforce APIs, Apex web service methods run with system privileges and don't respect the user's object and field permissions. However, Apex web service methods enforce sharing rules when declared with the with sharing keyword.
What is the purpose of the Http class?
To initiate an HTTP request and response.
What is the purpose of the HttpRequest class?
To programmatically create/define an HTTP request like GET, POST, DELETE, and PUT.
What is the purpose of the HttpResponse class?
To receive/handle the response returned by HTTP.
What are Total limits?
Total limits cap the number of calls made within a rolling 24-hour period.
How many classes does WSDL2Apex generate per WSDL document?
Two. One for synchronous calls, and one for asynchronous calls (prefixed with "Async").
How are resources accessed with the REST API?
URI
If you want an external system to pull information from related objects when using outbound messages, which pattern should you leverage?
Ue a callback pattern. Include the record identifiers of the other objects in the notification and set up the callback to gather required data from these objects.
What could cause WSDL2Apex to fail to generate apex code?
Unsupported types, multiple bindings, or unknown elements.
How many different sObjects types can be created through one execution of create()?
Up to 10 (Use an external ID and place it across the objects)
How many records can you merge with the merge() method?
Up to three records
What does the PATCH method do?
Updates record
What does the PUT method do?
Upserts records
How can you test and cover code generated for SOAP web service callouts?
Use Test.setMock() and implement the WebServiceMock interface.
How can you avoid CSRF?
Use custom headers. Don't rely on cookies.
Which integration pattern should you use in the following scenario: Customer Service Managers would like an alert when a rep successfully closes a case?
Use the Salesforce Streaming API to execute UI update based on data changes
What options exists outside of custom Apex Web Services?
Use the native Salesforce REST and/or SOAP APIs for create, update, and delete actions.
What is the Force.com excel connector?
Useful for cleaning and mass-updating Salesforce based data from within a spreadsheet 1) Bi-directional access to the SOAP API via tooklkit for Office 2) Access to custom objects 3) A simple query wizard 4) Readable user names
How can external applications integrate with Salesforce?
Via Apex Web Services.
How can a callout be executed asynchronously?
Via a @future method. @future(callout=true)
If you have a WSDL document, what is the easiest way to generate the code you need to communicate with the SOAP web service?
WSDL2Apex
What is the recommended tool for building a data loading client in Java using the Bulk API?
Web Service Connector
The two types of Apex Callouts.
Web Service and HTTP Callouts
Which applications can be integrated through the Force.com applications?
Web-enabled applications that use HTTPs
What does a HTTP method indicate?
What type of action is desired
What is an external service mashup?
When a mashup takes place in an external system and treats Force.com as the client. (typically uses web services, WSDL, and Java or Ruby)
When will the Bulk API place a batch in the queue for later processing?
When more than 100 records fail
When does Salesforce require a certificate be presented by a root Certification Authority (CA)?
When sending outbound messages, delegated authentication requests, or Apex callouts to secure/SSL endpoints
What is a client service mashup?
When you fetch, mashup and display data right from the browser (typically calling web services or pinging websites, or invoking Force.com and processing the result)
Which native Salesforce integration solution supports queuing?
Workflow based outbound messaging (any other integration solution should rely on a middleware solution for queueing and buffering)
What does the SOAP API support?
XML only.
What do Web Service Callouts typically use?
XML
What does the REST API support?
XML and JSON.
Are namespaces required in Apex REST endpoint URLs?
Yes, for orgs with MyDomain enabled, and for accessing REST methods within a managed or unmanaged package.
Are urlMappings case sensitive?
Yes.
What is a ground-to-cloud integration use case?
You are attempting to push AND pull data from Salesforce from your on-premise infrastructure
What is a cloud-to-ground integration use case?
You are attempting to push data from Salesforce to an on-premise solution
Where can you monitor Bulk Data Load Jobs?
Your Name > Setup > Monitoring > Bulk Data Load Jobs
Describe the anatomy of a REST API call
https://naxx.salesforce.com/services/data/v37.0/sobjects/account/0010000000acdee The above is an example of a URI for a specific Account record. The */services/data* portion of the URI indicates the API type, which in our example, is the REST API.
What are the API usage limits?
https://resources.docs.salesforce.com/206/latest/en-us/sfdc/pdf/salesforce_app_limits_cheatsheet.pdf UPDATE
What is the base endpoint for Apex REST?
https://yourInstance.salesforce.com/ services/apexrest/
How do you request a new batch of records in the REST API?
nextRecordsURL (similar to queryMore())
Which method should you use to work with approval processes?
process()
