SAA Cheat Sheet 2026

The 30 highest-yield SAA facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What is a profile in Salesforce? → A profile is used to define all user permissions, including access to fields and objects.
2. When implementing cloud infrastructure & deployment practices, what should a SAA professional prioritize first? → Compliance with established standards and protocols
3. What is the use of two-factor authentication in Salesforce? → It increases login security by requiring a second form of verification.
4. How does field-level security work in Salesforce? → It controls access to specific fields based on a user's profile settings.
5. Which field type in Salesforce is automatically indexed by the platform? → External ID fields
6. What is the primary purpose of security architecture & network defense in the context of Salesforce Application Architect Certification? → To ensure consistent quality and professional accountability
7. What is the first step in the deployment process using Salesforce DX? → Set up the development environment and authenticate with Salesforce CLI.
8. A Salesforce org uses Territory Management. How does territory assignment affect record access? → Territories grant access to accounts and related records beyond role hierarchy
9. What is the maximum number of records that a single SOQL query can return in Apex? → 50,000
10. How should a SAA professional handle a situation where cloud infrastructure & deployment protocols conflict with practical constraints? → Document the conflict and seek guidance from appropriate authorities
11. Which of the following is a key consideration when designing a data model with many-to-many relationships in Salesforce? → Create a junction object with Master-Detail relationships to both parent objects
12. Which Salesforce feature allows external systems to subscribe to Salesforce record changes in near real-time using a push mechanism? → Change Data Capture
13. What is the maximum number of SOQL queries allowed per Apex transaction in Salesforce? → 100
14. What is the purpose of the 'Defer Sharing Calculation' feature in Salesforce data management? → It suspends sharing recalculation during bulk data operations to improve performance
15. Which sandbox type refreshes the fastest and is MOST appropriate for rapid iterative development with small teams? → Developer Sandbox
16. What is the recommended optimal batch size when using Batch Apex to avoid SOQL row limit errors while maximizing throughput? → 200
17. Which object-level security mechanism prevents a user from even knowing a particular object exists in Salesforce? → Setting Tab visibility to 'Tab Hidden' and removing object permissions
18. Which documentation practice is most important for automation & scripting fundamentals in the SAA field? → Maintaining complete, accurate, and timely records
19. What is the maximum number of permission set groups a single user can be assigned in Salesforce? → No hard limit; users can belong to many permission set groups
20. How does continuing education relate to security architecture & network defense for SAA certified professionals? → It ensures professionals stay current with evolving standards and best practices
21. When should an architect choose SOSL (Salesforce Object Search Language) over SOQL for a use case? → When searching for a term across multiple objects and fields simultaneously
22. Which of the following best describes a key competency required for security architecture & network defense in SAA certification? → Critical thinking and evidence-based decision making
23. Which documentation practice is most important for security architecture & network defense in the SAA field? → Maintaining complete, accurate, and timely records
24. A company wants to enforce that no two Account records can have the same combination of Name and BillingCity. Which approach accomplishes this? → Duplicate Rules with a custom Matching Rule on Name + BillingCity
25. Which quality improvement method is most applicable to incident response & disaster recovery in Salesforce Application Architect Certification? → Plan-Do-Check-Act (PDCA) continuous improvement cycle
26. An architect needs to enforce that every Apex class deployed to production has at least one corresponding test class. Which approach enforces this at scale? → A CI/CD pipeline step that parses test coverage reports and blocks merges below threshold
27. Which Salesforce feature allows caching of frequently accessed data at the org, session, or partition level to reduce repeated database queries? → Platform Cache
28. An ISV wants to restrict certain Apex methods in their managed package so that only their own code can call them. What access modifier should they use? → private
29. What happens when a record lock conflict occurs during a Salesforce DML operation in Apex? → A DmlException is thrown immediately
30. What is data modeling in Salesforce? → Defining the structure, storage, and relationships of data in Salesforce.