Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Salesforce
  5. AP-211

Salesforce AP-211 Exam Questions
Salesforce Health Cloud Accredited Professional (Page 3 )

Updated On: 16-Feb-2026
Page 3 of 24
PDF with 115 Questions

A consultant is preparing to install Health Cloud in a production org for the first time.

Which three tasks should the consultant ensure are completed prior to installing Health Cloud?

Choose 3 answers

  1. Enable Person Accounts.
  2. Enable Shield Event Monitoring.
  3. Enable Chatter.
  4. Enable Health Cloud Installation Monitor.
  5. Enable Contacts to Multiple Accounts,

Answer(s): A,C,E

Explanation:

Step-by-Step Explanation;

Salesforce Health Cloud Prerequisites:

Enable Person Accounts:

Required for representing patients and healthcare contacts.

"Person Accounts must be enabled before installing Health Cloud."


Reference:

Health Cloud Installation Prerequisites

Enable Chatter:

Health Cloud uses Chatter for collaboration between care teams.

"Chatter must be enabled to use Health Cloud features like care coordination and notes."

Health Cloud Installation Prerequisites

Enable Contacts to Multiple Accounts:

Necessary to relate patients to multiple organizations/providers.

"Enable Contacts to Multiple Accounts to relate contacts (patients) to more than one account (e.g., provider, payer)."

Health Cloud Installation Prerequisites

Other Options:

B . Enable Shield Event Monitoring: Not required for Health Cloud installation (but is a best practice for auditing and compliance in some orgs).

D . Enable Health Cloud Installation Monitor: Not a standard Salesforce setting or prerequisite.

Health Cloud Installation Prerequisites



Bloomington Caregivers is implementing Health Cloud for managing the healthcare data of children under the age of 13.

Which three considerations should the company take into account to ensure compliance with the Children's Online Privacy Protection Act (COPPA)?

Choose 3 answers

  1. Disclosing the organization's privacy policy to parents and obtaining their consent
  2. Obtaining verified parental consent before collecting and storing any personal information of children
  3. Implementing appropriate security measures to safeguard children's personal information
  4. Ensuring information collected about children is protected with at rest and in-transit encryption
  5. Ensuring that Bloomington Caregivers' system implementation partner has met all COPPA regulations during the build phase

Answer(s): A,B,C

Explanation:

Step-by-Step Explanation;

COPPA Requirements in Healthcare Applications:

Disclose privacy policy and obtain parental consent:

"Organizations must provide clear privacy notices to parents and obtain their consent before collecting any personal information from children under 13."


Reference:

Salesforce Security Guide, COPPA Compliance

Obtain verified parental consent before collection/storage:

"Verified parental consent is a core requirement for COPPA, prior to collection and storage of children's personal data."

Implement security measures:

"Appropriate security controls and safeguards must be in place to protect children's data as mandated by COPPA."

Encryption:

While encryption is a best practice (option D), COPPA explicitly requires appropriate security but does not mandate encryption at rest and in transit as a specific requirement, though it is recommended.

Partner Compliance:

Option E refers to the implementation partner, but regulatory responsibility remains with the covered entity (Bloomington Caregivers), not the partner.

Salesforce Security Implementation Guide ­ COPPA Compliance

Health Cloud Security and Compliance



When accessing a person account record within Health Cloud, the user must have access to the entire account.

What should a consultant do in this scenario, according to Health Cloud implementation best practice?

  1. Set Modify All on the Account object at the Profile level.
  2. Set Contacts to Controlled by Parent.
  3. Set Private for the Contact object.
  4. Set the organization-wide default to Public Read Write for the Account object.

Answer(s): B

Explanation:

Step-by-Step Explanation;

Salesforce Health Cloud Best Practice for Person Accounts Access:

Person Accounts in Salesforce are a combination of an Account and a Contact.

To ensure that access to the person account (patient record) gives access to all data on the record, Salesforce recommends setting the Contact sharing setting to "Controlled by Parent".

This means the sharing and visibility of the Contact (patient details) will follow the sharing settings of the parent Account (the Person Account).

Salesforce Documentation


Reference:

"For Person Account sharing and access, set the Contact object sharing setting to Controlled by Parent. This ensures that users with access to the Account (Person Account) also have access to the associated Contact data."

Health Cloud Implementation Guide, Sharing and Access

Why Not the Other Options?

A . Set Modify All on the Account object at the Profile level: Too broad; not recommended due to least privilege principle.

C . Set Private for the Contact object: Would prevent access to the Contact, even if user has access to the Account.

D . Set the organization-wide default to Public Read Write for the Account object: Not best practice for healthcare, as it risks overexposing sensitive data.

Health Cloud Implementation Guide ­ Sharing and Access



Bloomington Caregivers would like to display patient information from both Salesforce standard objects and data from an external system.

Which three Health Cloud features should a consultant recommend the company use to display this on the patient record page?

Choose 3 answers

  1. FlexCards
  2. Salesforce Flows
  3. Integration Procedures
  4. DataRaptors
  5. Visualforce Pages

Answer(s): A,C,D

Explanation:

Step-by-Step Explanation;

Health Cloud Best Practice for Displaying Internal and External Data:

FlexCards (part of OmniStudio) can display data from multiple sources in a unified view on a patient record.

Integration Procedures connect to external systems and bring in data (e.g., from EHRs or other sources).

DataRaptors extract and transform Salesforce data for display and use in FlexCards.

Salesforce Documentation


Reference:

"FlexCards can display internal Salesforce data and call Integration Procedures or DataRaptors to bring in external or standard object data."

-- OmniStudio Standard Guide

"Integration Procedures are used to retrieve and update data from external systems and can be invoked directly from FlexCards or OmniScripts."

-- OmniStudio Integration Procedures

"DataRaptors map Salesforce data to and from FlexCards and Integration Procedures, enabling seamless display of patient information."

-- OmniStudio DataRaptors

Other Options:

Salesforce Flows: Good for automation but not for real-time display of combined external and internal data on record pages.

Visualforce Pages: Legacy solution, not recommended for modern Health Cloud patient page display, and does not natively integrate with OmniStudio tools.

OmniStudio Standard Guide

OmniStudio Integration Procedures

OmniStudio DataRaptors



An administrator for Health Cloud wants to ensure that the files in their full sandbox instance are encrypted.

Which encryption solution supports the encryption of files in this scenario?

  1. Classic Encryption
  2. Salesforce Shield
  3. salesforce Data Mask
  4. Industry Data Security

Answer(s): B

Explanation:

Step-by-Step Explanation;

Requirement:

Encrypt files in a full sandbox instance.

Salesforce Shield Platform Encryption:

Provides encryption of files and attachments at rest across Salesforce environments (including sandboxes).

"Use Shield Platform Encryption to encrypt files and attachments stored in Salesforce, including those in sandbox environments."

-- Salesforce Shield Platform Encryption Guide

Other Options:

Classic Encryption: Only encrypts a limited set of standard fields, not files or attachments.

Salesforce Data Mask: Masks data for sandbox use, but does not encrypt files for runtime.

Industry Data Security: Not a Salesforce product for file encryption.


Reference:

Shield Platform Encryption Guide






Post your Comments and Discuss Salesforce AP-211 exam dumps with other Community members:

Join the AP-211 Discussion