Salesforce Exam Security and Privacy Accredited Professional Topic 1 Question 23 Discussion

Actual exam question for Salesforce's Security and Privacy Accredited Professional exam

Question #: 23
Topic #: 1

[All Security and Privacy Accredited Professional Questions]

A customer prefers to generate an encryption key for Salesforce to use. They prefer to generate it manually, once a year.

What key management capability should the admin advise them to use?

AExport the tenant secret

BImplement a custom Apex key generation class

CBring your own key, plus opt-out of key derivation

DUpload your own tenant secret

Show Suggested Answer

Suggested Answer: A

by Carissa at Mar 04, 2024, 05:09 AM

Limited Time Offer

25%

Off

Get Premium Security and Privacy Accredited Professional Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Helga

7 months ago

But wouldn't exporting the tenant secret be a simpler option for the customer?

upvoted 0 times

...

Jerrod

7 months ago

I agree with Diego. Bringing their own key would give the customer control over their encryption key.

upvoted 0 times

...

Lashon

7 months ago

I don't know, B) Implement a custom Apex key generation class could be kind of fun. Who doesn't love a good coding challenge?

upvoted 0 times

Ivan

7 months ago

Implementing a custom Apex key generation class could be a great solution for your encryption key needs.

upvoted 0 times

...

Casie

7 months ago

I agree, it would definitely be a coding challenge worth taking on.

upvoted 0 times

...

Essie

7 months ago

That sounds like a good idea! It could be a fun project to work on.

upvoted 0 times

...

Diego

7 months ago

I think the admin should advise them to bring your own key and opt-out of key derivation.

upvoted 0 times

...

Jimmie

8 months ago

Haha, I can already see the admins trying to explain 'Bring your own key' to the customer. Might as well just go with C) and save everyone some trouble.

upvoted 0 times

...

Kristin

8 months ago

I'm not a fan of generating the key manually every year, but C) is the best option here. Anything to avoid that Apex headache!

upvoted 0 times

Florinda

7 months ago

Definitely, avoiding the headache of manual key generation every year is worth it.

upvoted 0 times

...

Raylene

7 months ago

I agree, avoiding the Apex headache is definitely a plus.

upvoted 0 times

...

Winfred

7 months ago

C) Bring your own key, plus opt-out of key derivation is the best option for you.

upvoted 0 times

...

Kerrie

7 months ago

I agree, it's better than dealing with custom Apex key generation.

upvoted 0 times

...

Alaine

7 months ago

C) Bring your own key, plus opt-out of key derivation sounds like the best option.

upvoted 0 times

...

Rima

8 months ago

C) Bring your own key, plus opt-out of key derivation is definitely the way to go. It gives us the most control over the encryption key.

upvoted 0 times

Mitsue

7 months ago

Definitely, it's important to have that level of control over our encryption key.

upvoted 0 times

...

Lynette

8 months ago

I agree, bringing our own key gives us more control.

upvoted 0 times

...

Clay

8 months ago

But wouldn't exporting the tenant secret be a simpler option for the customer?

upvoted 0 times

...

Lore

8 months ago

I agree with Annabelle. Bringing their own key would give the customer control over their encryption key.

upvoted 0 times

...

Annabelle

9 months ago

I think the admin should advise them to bring your own key and opt-out of key derivation.

upvoted 0 times

...