ADM-201 Practice Test

ADM-201 practice test: what's covered

• Salesforce CRM
• Config & Setup
• Objects
• Automation
• Security
• Reports

Free ADM-201 sample questions

1. A new sales rep should have the exact same base access as the existing sales team, plus the ability to manage price books that the rest of the team cannot. What is the BEST way to grant the extra access?

   • A. Assign the rep the standard Sales profile and add a permission set that grants price book management
   • B. Clone the Sales profile, add the price book permission, and assign the cloned profile to the rep
   • C. Give the rep the System Administrator profile so nothing is missing
   • D. Edit the Sales profile directly to add price book management for everyone
   Show answer

   Correct: A. Permission sets layer extra access on top of a profile without forking it — the modern best practice. Cloning the profile (B) creates maintenance overhead and is the common misconception. The Admin profile (C) over-grants. Editing the shared profile (D) would give everyone the extra access.

2. An organization-wide default (OWD) for the Account object is set to Private. A manager needs read access to all accounts owned by their team members below them. What is the MOST appropriate mechanism?

   • A. Create a criteria-based sharing rule for every account
   • B. Use the role hierarchy so managers inherit access to records owned by subordinate roles
   • C. Set the Account OWD to Public Read Only
   • D. Manually share each account with the manager
   Show answer

   Correct: B. The role hierarchy automatically grants users access to records owned by (or shared with) users below them. Sharing rules (A) open access laterally, not up the hierarchy. Changing OWD (C) would expose accounts org-wide. Manual sharing (D) does not scale.

3. Which TWO statements about profiles versus permission sets are correct? (Choose 2)

   • A. A user can be assigned exactly one profile but many permission sets
   • B. Permission sets can only remove access, never grant it
   • C. Permission sets are the recommended way to grant additional access without changing a user's profile
   • D. A user can have multiple profiles assigned at once
   • E. Profiles cannot control login hours or IP ranges
   Show answer

   Correct: A and C. Each user has exactly one profile but can hold many permission sets, which only ever ADD access. B is wrong (sets grant, they do not remove). D is wrong (one profile only). E is wrong — profiles DO control login hours and login IP ranges.

4. Sales reps in the West region should NOT see opportunities owned by reps in the East region, but the OWD is Public Read Only. What change BEST enforces this separation?

   • A. Add a validation rule that blocks viewing East opportunities
   • B. Set the Opportunity OWD to Private and use sharing rules to open access only within each region
   • C. Remove the Read permission on Opportunity from the West profile
   • D. Create separate record types for East and West
   Show answer

   Correct: B. Record visibility starts with OWD; to restrict cross-region viewing you must tighten OWD to Private, then selectively open with sharing rules. A validation rule (A) controls saves, not visibility. Removing Read (C) blocks all opportunities. Record types (D) control picklists/layouts, not access.

5. An admin must ensure a group of contractors can only log in Monday to Friday, 9 AM to 6 PM, and only from the office network. Where are BOTH of these settings configured?

   • A. On the user record for each contractor individually
   • B. On the contractors' profile (Login Hours and Login IP Ranges)
   • C. In a permission set assigned to the contractors
   • D. In Session Settings under Security Controls
   Show answer

   Correct: B. Login Hours and Login IP Ranges are configured on the profile. Permission sets (C) cannot set login hours. The user record (A) does not hold these. Session Settings (D) controls session timeout/security, not per-profile login windows.

Last updated: 2026-10-19

ADM-201 practice test FAQ