Praxis Academy
Home › Platform Administrator › Configuration and Setup

Platform Administrator practice questions: Configuration and Setup

Configuration and Setup is 15% of the Salesforce Certified Platform Administrator exam. It covers users, profiles, permission sets, roles and org access. Try these 19 free questions, then open each answer to see why every option is right or wrong.

01

Each Salesforce user can be assigned to how many profiles?

  1. One
  2. Two
  3. Three
  4. Four
  5. As many as needed
Show answer

Answer: A

A. One ✓Correct. Every user record carries a single profile.
B. TwoA second profile cannot be assigned; extra access comes from permission sets.
C. ThreeThe limit is one, not three.
D. FourThe limit is one, not four.
E. As many as neededProfiles are not unlimited; permission sets are the mechanism that can be stacked.

Why: A user has exactly one profile and one role. Extra access is layered on with permission sets, of which a user can hold many.

02

Opportunity org-wide default is Public Read/Write. Which security feature can you use to restrict some users from accessing Opportunities?

  1. Role hierarchy
  2. Record type
  3. Page layout
  4. Profile
Show answer

Answer: D

A. Role hierarchyRoles can only open up access further, never block object access.
B. Record typeRecord types affect picklists and layouts, not object access.
C. Page layoutPage layouts control what is displayed, not whether users can reach records.
D. Profile ✓Correct. Removing Opportunity object permissions on the profile blocks access.

Why: If a profile does not grant object access, users cannot see the object or its records regardless of the sharing default.

03

Which three are types of Digital Experiences in Experience Cloud? (select 3)

Choose three.

  1. Partner
  2. Employee
  3. Government
  4. Customer
  5. Health
Show answer

Answer: A, B, D

A. Partner ✓Correct.
B. Employee ✓Correct.
C. GovernmentGovernment is a separate cloud, not an experience type.
D. Customer ✓Correct.
E. HealthHealth is a separate cloud, not an experience type.

Why: Experience Cloud sites are typically built for customers, partners or employees.

04

You need to quickly block a user from logging in. Which two actions work? (select 2)

Choose two.

  1. Freeze the user.
  2. Delete the user.
  3. Change the user's profile.
  4. Change the user's role.
  5. Deactivate the user.
Show answer

Answer: A, E

A. Freeze the user. ✓Correct.
B. Delete the user.Salesforce users cannot be deleted.
C. Change the user's profile.A different profile does not block login.
D. Change the user's role.A different role does not block login.
E. Deactivate the user. ✓Correct.

Why: Freezing blocks login immediately while keeping the user in place, and deactivation removes login access. Users cannot be deleted in Salesforce.

05

Which three options are available as User Interface settings in Setup? (select 3)

Choose three.

  1. Enhanced Lists
  2. Chatter
  3. Collapsible Sidebar
  4. Hover Details
Show answer

Answer: A, C, D

A. Enhanced Lists ✓Correct. Enables enhanced list views.
B. ChatterChatter is enabled in its own settings, not as a User Interface checkbox.
C. Collapsible Sidebar ✓Correct. Lets users collapse the sidebar.
D. Hover Details ✓Correct. Shows hover detail popups.

Why: Setup > User Interface holds a set of checkboxes controlling interface behavior, including enhanced lists, a collapsible sidebar and hover details.

06

Users on custom profiles cloned from Minimum Access - Salesforce are stuck in Classic. What do you grant so they can use Lightning?

  1. Place the users under the System Administrator role.
  2. Enable the Lightning Experience User permission on the profile or a permission set.
  3. Turn on Enhanced Interface Routing in user management settings.
  4. Add Lightning component pages to the default user layout.
Show answer

Answer: B

A. Place the users under the System Administrator role.Roles do not grant interface access.
B. Enable the Lightning Experience User permission on the profile or a permission set. ✓Correct.
C. Turn on Enhanced Interface Routing in user management settings.There is no such routing setting that grants access.
D. Add Lightning component pages to the default user layout.Component pages do not control interface access.

Why: The Lightning Experience User system permission is required to access Lightning.

07

A regional supervisor is a delegated administrator for their team's users. Which limitation applies?

  1. They cannot assign profiles within their delegated scope.
  2. They cannot assign users to public groups.
  3. They cannot create, edit or manage permission sets.
  4. They cannot unlock users or reset passwords.
Show answer

Answer: C

A. They cannot assign profiles within their delegated scope.They can assign specified profiles.
B. They cannot assign users to public groups.They can assign users to specified public groups.
C. They cannot create, edit or manage permission sets. ✓Correct.
D. They cannot unlock users or reset passwords.They can unlock accounts and reset passwords.

Why: Delegated administrators can manage users in their scope but cannot create or edit permission sets.

08

Crestview wants employees to log in only during business hours and only from corporate IP ranges. Where do you configure this?

  1. User role hierarchy
  2. User profile
  3. Company settings
  4. Custom permission sets
Show answer

Answer: B

A. User role hierarchyRoles do not restrict login.
B. User profile ✓Correct.
C. Company settingsCompany settings are org-wide, not per-profile.
D. Custom permission setsPermission sets do not hold login restrictions.

Why: Login hours and login IP ranges are profile-level settings.

09

An admin is browsing AppExchange for solutions without custom Apex. Which two can be found there? (select 2)

Choose two.

  1. Prebuilt UI components
  2. Custom user licenses
  3. Certified consulting partners
  4. Production sandbox environments
Show answer

Answer: A, C

A. Prebuilt UI components ✓Correct.
B. Custom user licensesLicenses are not obtained there.
C. Certified consulting partners ✓Correct per the key.
D. Production sandbox environmentsSandboxes are not AppExchange items.

Why: AppExchange lists apps and components, plus consulting partners who can help.

10

Zenith Healthcare has several admins changing objects, flows and profiles. Management wants a log of who changed which setting and when. Which tool?

  1. Field history tracking
  2. System Health Check
  3. Event Monitoring logs
  4. Setup Audit Trail
Show answer

Answer: D

A. Field history trackingField history tracks data values on records.
B. System Health CheckHealth Check scores security settings.
C. Event Monitoring logsEvent monitoring tracks user activity.
D. Setup Audit Trail ✓Correct.

Why: The Setup Audit Trail records configuration changes, including who made them and when.

11

Starlight Real Estate needs a mortgage pre-qualification calculator with a multi-screen questionnaire that creates leads, in two days with no development budget. What from AppExchange should the admin use?

  1. Flow solutions
  2. The consultants directory
  3. Lightning Data solutions
  4. Bolt solutions
Show answer

Answer: A

A. Flow solutions ✓Correct.
B. The consultants directoryConsultants cost money and time.
C. Lightning Data solutionsLightning Data provides external data.
D. Bolt solutionsBolt solutions are for building communities.

Why: Flow solutions are prebuilt, configurable flows for things like calculators and intake forms.

12

An auditor asks the admin to evaluate password policies, session security and login settings against Salesforce's baseline. Which tool?

  1. Setup Audit Trail
  2. Health Check
  3. Org-wide defaults
  4. Field history tracking
Show answer

Answer: B

A. Setup Audit TrailThe audit trail logs changes.
B. Health Check ✓Correct.
C. Org-wide defaultsOWD controls record access.
D. Field history trackingField history tracks data changes.

Why: Health Check compares security settings with a baseline standard and scores them.

13

Apex Financial requires CreditScore at the Underwriting stage for standard users, but Risk Executives must save without it. How?

  1. Require the field on all page layouts.
  2. Make the field universally required.
  3. Use a screen flow to force entry for all users.
  4. Build a validation rule that requires it and excludes the Risk Executive profile.
Show answer

Answer: D

A. Require the field on all page layouts.Layout requirements apply to everyone.
B. Make the field universally required.Universal requirements apply to everyone.
C. Use a screen flow to force entry for all users.A flow does not enforce on every save path.
D. Build a validation rule that requires it and excludes the Risk Executive profile. ✓Correct.

Why: A validation rule can depend on stage and exempt chosen profiles.

14

The new DiscountCode__c field on Asset does not appear for service agents. Which two troubleshooting steps help? (select 2)

Choose two.

  1. Check field-level security for read access on the agents' profile.
  2. Change the Asset OWD to Public Read/Write.
  3. Confirm the field is on the agents' assigned page layout.
  4. Check the Setup Audit Trail to grant page layout component access.
Show answer

Answer: A, C

A. Check field-level security for read access on the agents' profile. ✓Correct.
B. Change the Asset OWD to Public Read/Write.Sharing does not affect field visibility.
C. Confirm the field is on the agents' assigned page layout. ✓Correct.
D. Check the Setup Audit Trail to grant page layout component access.The audit trail only logs changes.

Why: FLS and page layout both control whether a field appears.

15

An upcoming Release Update changes API security context enforcement for automation. What is the recommended procedure?

  1. Enable it in production on a weekend without sandbox testing.
  2. Ask Support for a permanent exemption.
  3. Activate it in a sandbox first and test automation impact.
  4. Let it auto-activate with no testing.
Show answer

Answer: C

A. Enable it in production on a weekend without sandbox testing.Skipping testing is risky.
B. Ask Support for a permanent exemption.Exemptions are not permanent.
C. Activate it in a sandbox first and test automation impact. ✓Correct.
D. Let it auto-activate with no testing.Untested activation may break automation.

Why: Test in a sandbox before production to catch problems.

16

Which three settings can be configured under Password Policies? (select 3)

Choose three.

  1. Prohibited password values
  2. Password complexity requirements
  3. Days until passwords expire
  4. Mandatory password manager integration
  5. Automatic user profile revocation
Show answer

Answer: A, B, C

A. Prohibited password values ✓Correct.
B. Password complexity requirements ✓Correct.
C. Days until passwords expire ✓Correct.
D. Mandatory password manager integrationNot a password policy setting.
E. Automatic user profile revocationNot a password policy setting.

Why: Password policies cover banned values, complexity and expiry.

17

When an employee logs in through the web interface, which two settings does Salesforce evaluate? (select 2)

Choose two.

  1. The profile's login hours
  2. The MFA for User Interface Logins permission
  3. Role IP address restrictions
  4. The MFA for API Logins permission
Show answer

Answer: A, B

A. The profile's login hours ✓Correct.
B. The MFA for User Interface Logins permission ✓Correct.
C. Role IP address restrictionsIP restrictions are on profiles, not roles.
D. The MFA for API Logins permissionAPI MFA applies to API logins.

Why: Profile login hours and MFA for UI logins apply to browser logins.

18

Which two elements must be specified when creating a validation rule? (select 2)

Choose two.

  1. Error message location
  2. Rule active date
  3. Formula return type
  4. Error condition formula
Show answer

Answer: A, D

A. Error message location ✓Correct.
B. Rule active dateThere is no active date.
C. Formula return typeThe return type is not chosen.
D. Error condition formula ✓Correct.

Why: A rule needs the formula that detects invalid data and where the error message shows.

19

An admin wants to hide the Equipment__c tab from the App Launcher and navigation for sales profiles, while letting them view Equipment records via lookups and related lists. Which profile setting?

  1. Tab settings set to Tab Hidden
  2. App permissions disabling Sales Console
  3. Org-wide sharing defaults
  4. Object permissions with Read removed
Show answer

Answer: A

A. Tab settings set to Tab Hidden ✓Correct.
B. App permissions disabling Sales ConsoleApp permissions do not hide a tab.
C. Org-wide sharing defaultsOWD does not hide tabs.
D. Object permissions with Read removedRemoving Read would block record access.

Why: Tab Hidden removes the tab but keeps record access.

Find out if you're ready to pass

Take the free Platform Administrator diagnostic: 20 questions, no account needed. Then unlock all 320 questions, full practice exams and the study guide.

Start the free diagnosticSee plans

Other sections of this exam