Integration-Architecture-Designer Exam Dumps | Universal Containers would like to use a hard-coded username/password/security token of a user with a

<< Prev Question Next Question >>

Question 9/108

Universal Containers would like to use a hard-coded username/password/security token of a user with a System Administrator profile to integrate its back-end system to Salesforce for inbound API calls.
Which two security issues are associated with this approach.

A. Unintended password resets will cause the integration to stop working and disrupt business processes.

B. Unsecure storage of the credentials may result in hackers gaining unauthorized access to Salesforce.

C. Apex web services can executive with system privileges with such Salesforce credentials.

D. All back-end systems get uncontrolled access to any data within the Salesforce environment.

Recent Comments (The most recent comments are at the top.)

askSalesforce - Jan 16, 2024

B&D is correct
As for C - it still be in user context (Admin user, yes, but still user context)

Vinh Hua - Feb 21, 2023

B & D is correct.
Security issue will be occur not only when using Apex web services but also when using standard API of Salesforce like REST API & SOAP API

dd - Feb 11, 2023

BC

C. Apex web services can execute with system privileges with such Salesforce credentials is another security issue because with a System Administrator profile, the web services would have access to all objects, data, and functions within the Salesforce environment, including the ability to make modifications to the data. This could result in unintended changes or data corruption if the web services are not properly controlled or monitored. It also raises the risk of data breaches and unauthorized access to sensitive information.

Question 9/108

Recent Comments (The most recent comments are at the top.)

LEAVE A REPLY

Download PDF File