Salesforce Certified Nonprofit Cloud Consultant (NP-Con-102) Exam - Topic 6 Question 116 Discussion

Actual exam question for Salesforce's Salesforce Certified Nonprofit Cloud Consultant (NP-Con-102) exam

Question #: 116
Topic #: 6

[All Salesforce Certified Nonprofit Cloud Consultant (NP-Con-102) Questions]

A nonprofit has employed a contract developer for work involving objects that contain personal and personally identifiable information. The contractor is working in a full copy sandbox.

What should the consultant recommend to ensure the contractor is unable to access this sensitive data?

AEncrypt all fields containing sensitive data with Classic Encryption.

BConfigure the contractor's Profile to prevent access to the sensitive data.

CImplement Salesforce Data Mask and mask the sensitive data.

DImplement Salesforce Shield and apply it to the sensitive data.

Show Suggested Answer

Suggested Answer: C

https://trailhead.salesforce.com/en/content/learn/modules/salesforce-data-mask/understand-the-importance-of-data-privacy

Salesforce Data Mask is the recommended solution to ensure the contractor is unable to access sensitive data in a full copy sandbox. Data Mask is designed to secure sensitive data in sandboxes by masking or obfuscating it, thereby preventing unauthorized access.

Salesforce Data Mask Overview:

Salesforce Data Mask allows you to obfuscate sensitive data in sandboxes, ensuring that real data is not exposed.

It provides various masking options, including anonymization, pseudonymization, and deletion.

Implementation Steps:

Install Salesforce Data Mask from the Salesforce AppExchange.

Configure the masking rules for the fields that contain sensitive information. You can choose the appropriate masking technique based on your needs (e.g., random characters, fixed characters, or deletion).

Apply the masking rules to the full copy sandbox where the contractor will be working.

Benefits of Using Data Mask:

Security: Ensures sensitive data is not exposed in non-production environments.

Compliance: Helps meet regulatory and compliance requirements by protecting personal and personally identifiable information.

Flexibility: Allows you to define specific rules for different types of data and fields.

CertGod Nonprofit Cloud Consultant study guide: 'Implement Salesforce Data Mask and mask the sensitive data'.

by Francis at Jul 11, 2025, 04:53 AM

Limited Time Offer

25%

Off

Get Premium Salesforce Certified Nonprofit Cloud Consultant (NP-Con-102) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lili

2 months ago

Not sure if just configuring the profile is enough.

upvoted 0 times

...

Mertie

2 months ago

Wait, can encryption really stop access?

upvoted 0 times

...

Golda

2 months ago

D is definitely the most secure option!

upvoted 0 times

...

Suzan

3 months ago

Option B seems like the easiest fix.

upvoted 0 times

...

Malcom

3 months ago

I think C is the best choice for masking data.

upvoted 0 times

...

Ronna

3 months ago

I vaguely recall something about Salesforce Shield providing enhanced security features, but I'm not confident if that's the best option here.

upvoted 0 times

...

Isabelle

3 months ago

I feel like we practiced a similar question about data masking before. Option C could be the right approach since it specifically mentions masking sensitive data.

upvoted 0 times

...

Ellsworth

4 months ago

I'm not entirely sure, but I think encrypting data might not be enough if the contractor has access to the keys.

upvoted 0 times

...

Sharan

4 months ago

I remember we discussed the importance of configuring profiles to limit access, so option B seems like a solid choice.

upvoted 0 times

...

Sherita

4 months ago

I feel pretty confident that Salesforce Shield is the right choice here. It's designed specifically for protecting sensitive data, so that seems like the safest and most comprehensive solution.

upvoted 0 times

...

Jolene

4 months ago

Configuring the contractor's profile sounds like a good start, but I want to make sure that completely prevents access to the sensitive info. I'll double-check the details on that.

upvoted 0 times

...

Gregg

4 months ago

I'm a little unsure about the differences between the encryption and masking options. I'll need to review those more closely to decide which one would be the best fit.

upvoted 0 times

...

Virgie

4 months ago

Okay, let's see. I'm pretty sure Salesforce Shield is the way to go here to protect that sensitive data. I'll make sure to read through the details on that option.

upvoted 0 times

...

Ryan

5 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the different options and how they might impact the sensitive data.

upvoted 0 times

...

Veronica

6 months ago

D all the way! Salesforce Shield is like a supercharged suit of armor for your data. Gotta keep those hackers out, am I right?

upvoted 0 times

Javier

5 months ago

B) Configure the contractor's Profile to prevent access to the sensitive data.

upvoted 0 times

...

Son

5 months ago

A) Encrypt all fields containing sensitive data with Classic Encryption.

upvoted 0 times

...

Meghann

6 months ago

Ah, the age-old question of how to secure sensitive data. It's like trying to keep a cat in a bag - you just can't trust those contractors, can you?

upvoted 0 times

Johana

5 months ago

A) Encrypt all fields containing sensitive data with Classic Encryption.

upvoted 0 times

...

Viola

7 months ago

But wouldn't implementing Salesforce Shield be more effective in protecting the data?

upvoted 0 times

...

Veronica

7 months ago

I think we should configure the contractor's Profile to prevent access to the data.

upvoted 0 times

...

Goldie

7 months ago

I agree with Viola, that seems like the most secure option.

upvoted 0 times

...

Katie

7 months ago

Hmm, I'm not sure. Encrypting everything with Classic Encryption seems a bit overkill. Why not just configure the contractor's Profile?

upvoted 0 times

Casandra

5 months ago

B) Configure the contractor's Profile to prevent access to the sensitive data.

upvoted 0 times

...

Geoffrey

6 months ago

A) Encrypt all fields containing sensitive data with Classic Encryption.

upvoted 0 times

...

Viola

7 months ago

I think we should encrypt all fields with Classic Encryption.

upvoted 0 times

...

Delisa

7 months ago

Option C seems like the easiest solution. Masking the data with Salesforce Data Mask is a quick and effective way to secure it.

upvoted 0 times

Noble

5 months ago

Yeah, masking the sensitive data with Salesforce Data Mask is a smart move to protect it.

upvoted 0 times

...

Isidra

6 months ago

I agree, Salesforce Data Mask seems like the most straightforward solution.

upvoted 0 times

...

Tawna

7 months ago

Option C is definitely the way to go. It's simple and efficient.

upvoted 0 times

...

Jacklyn

7 months ago

I think option D is the way to go. Salesforce Shield offers robust encryption and access controls to protect sensitive data.

upvoted 0 times

Luis

6 months ago

User 2

upvoted 0 times

...

Vashti

7 months ago

User 1

upvoted 0 times

...