Salesforce Certified Marketing Cloud Administrator Exam Prep
Salesforce Certified Marketing Cloud Administrator (Page 4 )

• Correct choices: Recommendation Code and Conversion/Cart Code (options B and C).
• Why:

• Why the others aren’t correct:

• Correct answer: Query the Bounce Data View

• In Marketing Cloud, hard-bounce events are stored in the data view called the Bounce Data View. Querying this view gives you address-level bounce details (e.g., subscriber key, bounce type, date), which you can use to build a suppression list for future sends.
• This approach is data-view driven and automatable (via SQL queries and automations).

• Run a Bounce Email Report: Useful for manual review but not as robust for creating ongoing suppression lists or automation.
• Query the Send Log: Contains send results but isn’t the canonical source for bounce details; more work to isolate hard bounces.
• Run an Account Send Summary Report: Provides high-level metrics, not per-address bounce data.

• Red team: Simulates attackers and tests exploitability.
• Blue team: Defends, monitors, detects, and responds to attacks.
• Purple team: Combines red- and blue-team activities to improve cooperation and defenses.
• White team: Manages and oversees the rules, scope, and authorization of the exercise.

• The vulnerability scan identifies a vulnerability.
• The administrator verifies that the vulnerability is not present.
• Therefore, the scan produced a false positive.

• True positive: A vulnerability is reported and genuinely exists.
• False negative: A vulnerability exists, but the scan fails to detect it.
• True negative: No vulnerability exists, and the scan correctly reports no issue.

• Customer needs: Primary focus in agile; guides prioritization and decision-making.
• Organization’s needs: Important constraints, but processes should be tailored when they create waste.
• Agile lead/project manager: Their role is to facilitate value delivery, not prioritize their own preferences.

• Packet loss
• Latency
• Jitter
• Call quality by user, device, network, location, or building

• Teams Usage Report: Shows adoption and usage statistics, not detailed call-quality metrics.
• Teams Device Usage Report: Reports which devices are being used and how, but does not provide detailed packet-loss analysis.
• Microsoft Network Testing Companion: Helps assess network readiness before deployment, but it is not the primary tool for analyzing packet loss from actual Teams calls.

• Disabling a compromised account
• Blocking a malicious IP address
• Isolating an endpoint
• Creating or escalating an incident ticket

• Virus signatures: Primarily associated with antivirus or endpoint protection.
• Security agent deployment: Usually handled by endpoint-management or security-agent platforms.
• Vulnerability scanning: Typically performed by vulnerability-management tools.

• transform() — modifies every element in an array
• filter() — keeps elements matching a condition
• exists() — checks whether any element matches
• aggregate() — reduces array elements to one result

sql 
SELECT transform(scores, x -> x * 2) 
FROM student_scores;

• A is incorrect because higher-order functions are mainly useful for nested or complex data.
• B is incorrect because they do not convert logic into Python.
• D is incorrect because their purpose is not to fix slow built-in functions, but to process arrays or maps with custom logic.

• Who owns security risks and decisions
• Who is responsible for implementing controls
• Who reports security performance to management
• How security responsibilities align with business objectives

• B — Compliance with audit requirements: Governance may support compliance, but audit compliance is not its main objective.
• C — Monitoring security incidents: This is an operational security activity, not the central purpose of governance.
• D — Creation of tactical solutions: Governance establishes direction and oversight; tactical solutions belong to management and operational teams.

• VLAN 10 for data
• VLAN 20 for voice

• A: Describes physical trunking or logical switch ports, not an SVI.
• B: An SVI can provide management access, but that is only one use—not the best description here.
• D: SVI use is not related to running out of physical ports.

1. The specific table — for example, incident
2. The parent table — for example, task
3. The wildcard table — *, which applies broadly

• The message came from the claimed sender (authentication)
• The message was not altered (integrity)
• The sender cannot easily deny sending it (non-repudiation)

• Attackers can send unsigned phishing emails.
• Attackers may compromise a legitimate account and send signed malicious emails.
• Users may still be tricked by a validly signed message.

• Penetration test: Tests for exploitable vulnerabilities; it does not provide a broad opinion on whether security controls operate effectively.
• Annual self-assessment: Not independent, so it provides less assurance.
• Allow each client the right to audit: Inefficient because every customer may conduct a separate audit, creating duplicated effort and disruption.

• A is incorrect: Flow Debugger is for debugging Salesforce Flows, not Trust Layer masking.
• B is incomplete/misleading: Requesting audit data may be part of reviewing the results, but collection and storage must first be enabled.
• C is correct: It describes the initial validation step.

• VPC: A logically isolated virtual network within a cloud provider; it describes network design, not the user-access model.
• NFV: Runs network services as software instead of on dedicated hardware.
• SaaS: Delivers software over the internet. Although the application may be delivered as SaaS, the question emphasizes its availability to multiple user groups, which points to multitenancy.

• Third-party enterprise application with embedded AI: The provider manages most security controls. The customer mainly manages users, data, and configuration.
• Application using an existing third-party FM: The customer controls the application and its inputs/outputs, but the provider controls the underlying model and infrastructure.
• Fine-tuning a third-party FM: The customer has additional responsibility for training data, data protection, and model behavior, but still depends on the provider’s base model and platform.
• Building and training a model from scratch: The customer controls the model, training data, application, deployment, and many security safeguards. This creates the greatest security ownership.

• Proxy server: Acts as an intermediary for requests, but does not necessarily provide an encrypted connection to the corporate network.
• NGFW: A firewall with advanced inspection and filtering capabilities; it may support VPNs but is not the remote-access solution itself.
• Security zone: A logical network grouping based on trust or security requirements, not a method for remote access.

• C — Before update
• D — Before insert

apex 
trigger AccountTrigger on Account (before insert, before update) { 
    for (Account acct : Trigger.new) { 
        acct.Description = 'Updated automatically'; 
    } 
}

• In after insert and after update, Trigger.new records are read-only.
• Use after triggers when you need the record’s final database Id or want to create/update related records.
• Attempting to change a field directly in an after trigger causes a read-only error.

• Data source: Folder
• Transformation: Remove the Content column (or keep only the file-metadata columns)

Why

• File name
• Extension
• Date modified
• Folder path
• Content — the binary contents of the file

• B — The glass core component is encased in a cladding.

• D — Light is transmitted through the core of the fiber.

• BNC connectors are associated mainly with coaxial copper cabling, not standard fiber connections.
• Data does not pass through the cladding; the cladding helps reflect and contain the light.
• RJ-45 connectors are used with copper Ethernet cabling, not fiber-optic interfaces.

• A. IDS attack signatures: An IDS primarily detects suspicious network activity; it is not the best tool for scanning uploaded files.
• C. Load balancer: Improves availability and distributes traffic but does not inspect files for malware.
• D. WAF: Protects web applications against attacks such as SQL injection and command injection. It may inspect HTTP requests, but malware scanning of uploaded PDFs is the key requirement here.

• Microsoft Foundry is an enterprise platform for developers, data scientists, and IT teams.
• It supports the full AI application lifecycle: selecting models, connecting enterprise data, developing, evaluating, deploying, monitoring, and scaling solutions.
• It can include visual tools and low-code experiences, but it is not primarily designed to enable business users to build complete generative AI solutions independently.

• B: You still need to select and configure an appropriate model.
• C: Business users may participate through visual tools, but they are not the primary target audience.
• D: Foundry includes low-code tools, but it is not fundamentally a low-code-only platform.

• Security groups
• Dynamic security groups
• Cloud-only or synchronized security groups

• Microsoft 365 groups
• Distribution groups
• Mail-enabled distribution groups

• Annual interest payments net of tax relief (A): future cash outflows for the issuer.
• Redemption value (B): the final cash outflow when the bond is redeemed.
• Market value now (C): the cash proceeds received now, acting as the initial cash flow in the IRR calculation.

• The listener uses a virtual IP address shared by the availability-group replicas.
• Floating IP, also called Direct Server Return (DSR), allows the SQL Server nodes to respond using the listener’s IP address rather than their individual VM IP addresses.
• This is required for the availability-group listener to function correctly with an Azure internal load balancer.

• Base table — the table containing common inherited fields
• Parent table — the table directly extended by the child
• Other tables in the hierarchy

• Security
• Availability
• Processing integrity
• Confidentiality
• Privacy

• Whether controls are suitably designed, and
• Whether they operated effectively over a period of time

• Streams — track change data for tables or views.
• External tables — reference data stored in an external cloud storage location.

• Role — account-level security object.
• Warehouse — account-level compute resource.
• User — account-level security object.
• Share — account-level object used to share data.

• UPS battery-backed outlets: Connect only essential devices needed during an outage:

• Surge-protector-only outlets: Connect nonessential devices, especially the printer. Printing does not need to continue while you are saving work and shutting down.
• UPS power source: Plug the UPS directly into a wall outlet.
• Surge protector power source: Plug it directly into a wall outlet as well. Do not normally plug a surge protector into the UPS, because that creates a daisy chain and can overload the UPS.

• Access List: controls whether a client is allowed or denied.
• Connect List: controls which wireless networks/APs a station may connect to.

• state preserves the client’s original context, such as the specific idea URL the user requested.
• The portal sends that value in the OAuth authorization request.
• Salesforce returns it after authorization, allowing the portal to redirect the user to the original idea rather than the Ideas home page.

1. Clear principles and boundaries — Employees have freedom, but decisions must remain within clear organizational values, policies and limits.
2. High degree of freedom — Managers are trusted to make decisions rather than seeking continual approval from senior management.
3. Frontline customer responsibility — Customer-facing managers should be empowered to manage customer relationships and respond quickly to needs.
4. Transparent and ethical information — Information should be openly available and used honestly, supporting trust and informed decision-making.

• Incident and problem management
• Change management
• Service-level management
• Configuration management
• Continual improvement

• Kanban: A workflow and task-visualization method; useful within service teams but not a complete service-management framework.
• Lean Six Sigma: Focuses on reducing waste and process variation; broader process-improvement methodology.
• ITSM: The overall discipline of managing IT services, not a specific framework or process model.

• Help the team identify the root causes of delays.
• Empower the team to improve its workflow and practices.
• Facilitate removal of impediments.
• Avoid directing the team toward a solution without its involvement.
• Protect quality and sustainable delivery rather than simply accelerating everything.

• A: An impediment log may help, but merely recording problems does not empower the team to solve them.
• B: Directing the team to solutions conflicts with self-management.
• C: Adding impediments to the product backlog may incorrectly treat internal obstacles as product features and delays their resolution.

• Preparing and managing datasets
• Building and training machine-learning models
• Testing and evaluating models
• Deploying models as endpoints for predictions

• Each Case must follow defined support steps.
• Each step must be completed within a specified time limit.

• Case Escalation Rules: Escalate Cases based mainly on age or criteria; they do not model a complete sequence of service steps.
• Process Builder with Scheduled Actions: Can automate time-based actions but is not the standard framework for Case service-level commitments.
• Omni-Channel Routing: Routes work to agents based on capacity and priority; it does not track Case lifecycle deadlines.

• Disable default accounts: Default or unused accounts may have known usernames or predictable settings, making them targets. They should be disabled, removed, or securely configured.
• Remove unnecessary services: Every running service creates potential vulnerabilities. Removing services the server does not need reduces exploitable entry points.

• Add the server to the asset inventory: Important for asset management, but not a hardening step.
• Document default passwords: Default passwords should be changed or eliminated—not documented for continued use.
• Send server logs to the SIEM: Valuable for monitoring and detection, but generally performed as part of logging/monitoring configuration.
• Join the server to the corporate domain: May be necessary operationally, but does not itself harden the server.

• Partners first log in to the corporate portal, which uses the shared SAML Identity Provider.
• When they select a Salesforce link, the IdP can send a SAML assertion directly to Salesforce.
• Salesforce validates the assertion and grants access to the Partner Community without requiring another login. This is IdP-initiated SSO because authentication begins outside Salesforce.

• SP-initiated SSO starts when Salesforce sends an authentication request to the IdP. That would be appropriate if users began by visiting Salesforce.
• The Web Server and User Agent OAuth flows are for OAuth authorization, not browser-based SAML federation between an IdP and Salesforce.

• Tracking who accessed or changed customer information
• Detecting unauthorized activity
• Supporting accountability and investigations
• Providing evidence for compliance and incident response

• Single sign-on not enabled: SSO improves convenience and centralized authentication, but it is not essential for access control.
• Complex passwords not required: This weakens authentication, but other controls may reduce the risk.
• Security baseline not consistently applied: A concern, but it is less specific and less immediately damaging than having no activity records at all.

• Suporta domínios personalizados.
• Oferece 50 GB de armazenamento — suficiente para os 10 GB de cada aplicação.
• Usa instâncias de computação dedicadas.
• Inclui balanceamento de carga entre instâncias.
• É o plano mais econômico entre as opções que atendem a todos esses requisitos.

• desktopwidth:i:1280
• desktopheight:i:1024

• Connection information: Controls connection-related settings, not the desktop resolution.
• Scaling plan: Controls when session hosts start, stop, or scale based on demand.
• Session behaviour: Controls behavior such as disconnect or logoff handling.
• Display settings: Specifically controls RDP display properties, making it the appropriate choice.

• A — Consumption-based pricing: AWS generally uses a pay-as-you-go model. You pay for the resources you consume rather than purchasing hardware upfront or paying for unused capacity.
• C — Economies of scale: AWS purchases and operates infrastructure at a very large scale, allowing it to reduce costs and pass some savings to customers through lower service prices.

• Perpetual licenses: These involve paying once for permanent software ownership and are not a primary AWS Cloud economic benefit.
• AWS Enterprise Support at no additional cost: Enterprise Support has an additional charge.
• Bring-your-own-hardware model: AWS provides and manages the underlying cloud infrastructure; customers do not normally bring their own physical servers.

• Create procurement-manager-role only in the shared services accounts, where procurement managers operate.
• Attach AWSPrivateMarketplaceAdminFullAccess to that role.
• Procurement managers assume the role when they need to administer Private Marketplace.
• Apply a root-level SCP that explicitly denies Private Marketplace administration to everyone except that role. The SCP acts as a maximum-permission boundary across member accounts.
• Add another SCP denying creation of a role with the same name. Otherwise, another administrator might create a similarly named role and bypass the intended exception.

• Creating the role in every account increases administration and creates more opportunities for misuse.
• A permissions boundary on developer roles does not prevent other administrators from managing Private Marketplace.
• Applying the SCP only to shared services accounts would not protect the rest of the organization.

xml 
<apex:page> 
    <apex:stylesheet value="{!URLFOR($Resource.MyStyles, 'styles/main.css')}" /> 
</apex:page>

• <apex:includeScript> is for JavaScript.
• <apex:includeStyle> is not a valid Visualforce component.
• <apex:require> is not the Visualforce tag used to load CSS.

• JDBC
• SnowSQL
• Snowflake Web Interface (UI)
• ODBC
• Python connector

• Azure DevOps Analytics views are accessed through the Power BI Azure DevOps (Boards only) connector.
• This connector authenticates directly to Azure DevOps Services and lets you select an Analytics view.
• Analytics views allow filtering and shaping data in the cloud before Power BI loads it.
• Azure DevOps Server (Boards only) is for an on-premises Azure DevOps Server instance, not Azure DevOps cloud.
• A generic OData Feed connection can access OData endpoints, but it is not the purpose-built connector for Azure DevOps Analytics views.
• “OData queries” describes the underlying technology or query approach, not the most appropriate Azure DevOps connector choice here.

• contoso.onmicrosoft.com
• contoso1.onmicrosoft.com

• onmicrosoft.com domains: Maximum of five per tenant.
• Custom domains: Domains that your organization owns and verifies in Microsoft 365.

• Technical platform interfaces: Important for integration and interoperability, but they should support—not drive—the architecture.
• Scalability of the network: Valuable as the organization grows, but a scalable solution is ineffective if it does not meet business or security needs.
• Development methodologies: Relevant to implementation, but they do not define the organization’s fundamental security requirements.

• netstat -tuln can show listening TCP ports.
• If the web service is not listening, or is bound only to 127.0.0.1, remote browsers cannot connect even though the server responds to ping.

• traceroute: Tests the path to the server, but ping already confirms basic reachability.
• tcpdump: Useful for detailed packet analysis, but it is more appropriate after checking whether a service is listening.
• arp: Helps troubleshoot local IP-to-MAC resolution, not an application-layer web connection.

• Note the question number before leaving—for example, Question 38.
• Use the exam’s question navigator or Back/Previous button to return to that number.
• If you close or refresh the page, your position may not be saved, depending on the site. Reopen the page and select the question number again.
• Avoid using the browser’s Back button if it causes the exam page to reload; use the exam’s built-in navigation instead.