Questions and Answers
What are the 3 features of Salesforce Shield?
- Platform Encryption, 2. Event Monitoring, 3. Field Audit Trail
What are the purchasing limitations for Shield Platform Encryption as an add-on license?
Requires Enterprise, Performance, or Unlimited Edition and requires purchasing Salesforce Shield.
Summarize the capabilities of the Encryption Policy in Shield Platform Encryption.
Encrypt individual fields and apply different encryption schemes to those fields, and encrypt other data elements like files and attachments.
Summarize the capabilities of the Deterministic Encryption in Shield Platform Encryption.
Signup and view all the answers
Summarize the capabilities of Cache-Only Key Service in Shield Platform Encryption.
Signup and view all the answers
What are 4 general limitations of Shield Platform Encryption?
Signup and view all the answers
What are 5 things that can be done with deterministic encryption, but not probabilistic encryption?
Signup and view all the answers
Study Notes
Salesforce Shield Features
- Platform Encryption: Natively encrypts sensitive data at rest across Salesforce apps, maintaining functionality while protecting PII and ensuring compliance. Users control encryption keys and permissions to safeguard sensitive information.
- Event Monitoring: Provides access to comprehensive data on app performance, security, and usage. Tracks every interaction, supports API access for data visualization, and aids in user adoption assessment and performance optimization.
- Field Audit Trail: Tracks the state and value of data over time, useful for regulatory compliance and audits. Offers scalability with a big data backend and the ability to maintain an audit trail for up to 10 years.
Purchasing Limitations
- Requires deployment on Enterprise, Performance, or Unlimited Edition. Adoption necessitates purchasing Salesforce Shield.
Encryption Policy Capabilities
- Enables encryption of individual fields with different schemes, including files, attachments, and Chatter data. It is vital to distinguish encryption from field-level and object-level security, which must be established prior to implementing encryption.
Deterministic Encryption Capabilities
- Allows filtering of encrypted data in Salesforce, maintaining usability in reports and list views. Supports WHERE clauses in SOQL and is compatible with unique and external ID fields, along with single-column indexes.
Cache-Only Key Service Capabilities
- Facilitates non-persisted key material management. Stores keys externally and provides on-demand access via an authenticated channel. Key material is securely transmitted in JSON Web Encryption format.
General Limitations of Shield Platform Encryption
- Einstein Lead Scoring: Encrypted fields are not evaluated.
- Duplicate Account/Contact Searches: Encrypted Account and Contact Name fields hinder duplicate results.
- Email Field Limitations: Encrypted standard Email fields do not identify invalid email addresses for Contacts, Leads, or Person Accounts.
- Salesforce Outlook Sync Issues: Filtering encrypted fields prevents syncing with Salesforce for Outlook.
Deterministic vs. Probabilistic Encryption
- Deterministic encryption allows for:
- Record matching and de-duplication during lead import.
- Encryption of fields designated as Unique or External Ids.
- Use of aggregate functions, WHERE clauses, and sorting in SOQL and SOSL queries.
- Search capabilities on encrypted fields.
- Referencing encrypted fields in Matching Rules.
Best Practices for Shield Platform Encryption
- Best practices ensure effective and secure implementation of Shield Platform Encryption, enhancing data protection and compliance.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Description
Test your knowledge on the key features of Salesforce Shield. This quiz focuses on Platform Encryption and its role in protecting sensitive data within Salesforce applications. Enhance your understanding of data security compliance and functionality in Salesforce.
