SFDX & Packages
Lock it Down
Coded
SAST and Furious
Free for All
100

The source of truth for package development.

What is Version Control?

100

Most sensitive data loss or misuse occurs from a company’s ___________.

What is Employees?

100

________ components are built using HTML and JavaScript.

What is Aura?

100

These are areas of your code that have an “opening” that could be exploited by a bad actor in CodeScan. 

What are Security Vulnerabilities?

100

Regression and integration testing can both be categorized under this broader type of testing.

What is Functional Testing?

200

A big feature of DX is the ability to take the super-dependent structure of Salesforce & convert it to this.

What are Packages?

200

Because of Salesforce restore limitations, every company should have a ___________ plan in place in the event of a disaster.

What is Business Continuity?

200

Shown in the prework video for objects, fields, and records, this native Salesforce tool allows you to visualize the metadata relationships between objects.  

What is Schema Builder?

200

Policies are __________ rulesets inside of OrgScan.

What is Customizable?

200

Optional functionality in Salesforce that controls what data sets specific parties can see.

What are Roles?

300

From this SFDX tool you can easily create environments for development and testing, synchronize source code between your orgs and VCS, and execute tests.

What is the Salesforce CLI?

300

The term for when a solution sits on top of Salesforce claims to be compliant because Salesforce is.

What is Piggy-Back Compliance?

300

The syntax of this language looks 70% the same as Java.  

What is Apex?

300

You can set up CodeScan to abide by best practices laid out by several acclaimed security regulatory bodies. Name one.  

What is OWASP/ SANS/ CWE?

300

This test checks how much user traffic an application can handle.

What is Load Testing?

400

To get started with scratch orgs, you choose an org to function as your ________.

What is Dev Hub?

400

How Vault anonymizes your data when it is seeded or loaded into a test environment.

What is Data Masking?

400

Being able to delete code from Salesforce is necessary, but they don't make it easy for developers. You can't do a _______ change with a changeset.

What is Destructive?

400

CodeScan will flag your code as this when there isn’t necessarily a security risk determined but there should be further inspection to verify.

What is a Hotspot?

400

When AutoRABIT provisions a cloud for a customer, we default to this vendor.

Who is AWS?

500

What CPQ stands for.

What is Configure, Price, Quote?

500

When coding in system mode, even if a user doesn't have access to a field, an Apex class running in system mode could potentially ______ or ______ to that field.

What is Read or Write?

500

Depending on the Salesforce Edition you have (Developer, Enterprise, Unlimited, or Performance), dictates the amount of scratch orgs that you can spin up in this time frame.

What is Daily?

500

Many companies overlook the importance of managing _________ access, as it controls who can download information from your Salesforce instance.  

What is Export?

500

This type of scan is run if you are just looking to scan your brand-new code, and not any existing code that had been previously scanned.  

What are Delta Scans?

M
e
n
u