# Health Check, Security Center and release updates

*Platform Administrator II Study Guide · Auditing and Monitoring · Last updated October 26, 2026 · https://www.certifyforce.com/study-guide/platform-administrator-ii/auditing-and-monitoring/health-check-security-center-and-release-updates*

How to review and fix security settings with Health Check (baselines, score, Fix Risks, notifications), when Security Center adds a multi-org view and alerts, and how to test and complete release updates and security enforcements before they change access.

- Certification: Salesforce Platform Administrator II
- Exam section: Auditing and Monitoring
- Study guide: https://www.certifyforce.com/study-guide/platform-administrator-ii

**Official exam objective:**

> Explain how to review and troubleshoot security settings including pending updates that may change system access.

## What the exam expects

- Read a Health Check score against a baseline, remediate risks with Fix Risks or the Edit link, and explain why a score changes.
- Choose the Health Check permission for viewing, exporting or importing baselines.
- Decide when Security Center is needed instead of Health Check: many orgs, trends and alerts.
- Use the Release Updates page tabs, test runs and Complete Steps By dates to prepare for updates that change access, including MFA and step-up authentication.

Key terms: **baseline** (recommended values for each security setting, the Salesforce Baseline Standard or a custom one); **Fix Risks** (changes selected settings to the baseline's values); **release update** (a platform change scheduled for enforcement in a release); **test run** (a toggle that enables an update early); **parent tenant** (the Security Center org that shows connected child tenants).

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Custom baselines | Up to five | [Health Check](https://help.salesforce.com/s/articleView?language=en_US&id=xcloud.security_health_check.htm&type=5) |
| Score drop with no changes | New signals can be introduced | [Health Check](https://help.salesforce.com/s/articleView?language=en_US&id=xcloud.security_health_check.htm&type=5) |
| Setting missing from Fix Risks | Change it with the Edit link | [Health Check](https://help.salesforce.com/s/articleView?language=en_US&id=xcloud.security_health_check.htm&type=5) |
| Score notifications | Weekly, to chosen users, when the score decreases | [Health Check](https://help.salesforce.com/s/articleView?language=en_US&id=xcloud.security_health_check.htm&type=5) |
| View and export baselines | View Health Check | [Health Check](https://help.salesforce.com/s/articleView?language=en_US&id=xcloud.security_health_check.htm&type=5) |
| Security Center licence | Add-on for Enterprise and Unlimited; free in Developer Edition | [Security Center](https://help.salesforce.com/s/articleView?id=sf.security_center.htm&language=en_US&type=5) |
| Security Center data | Stored for 6 months | [Security Center](https://help.salesforce.com/s/articleView?id=sf.security_center.htm&language=en_US&type=5) |
| Overdue tab | Past Complete Steps By, steps not done | [Release Updates](https://help.salesforce.com/s/articleView?language=en_US&id=sf.release_updates.htm&type=5) |
| Test run | Enables the update immediately; sandbox periods may end earlier | [Release Updates](https://help.salesforce.com/s/articleView?language=en_US&id=sf.release_updates.htm&type=5) |
| Step-up with SSO | Non-Salesforce MFA methods can't satisfy it | [Security-Related Product Updates](https://help.salesforce.com/s/articleView?id=005317465&language=en_US&type=1) |

## Check yourself

- Why can a Health Check score drop when the Setup Audit Trail shows no changes?
- When is Security Center needed instead of Health Check?
- What happens when you enable a release update's test run?
- Why should SSO users register a Salesforce MFA method before step-up authentication for reports is enforced?

## Sources

- [Security Health Check](https://help.salesforce.com/s/articleView?language=en_US&id=xcloud.security_health_check.htm&type=5)
- [Release Updates](https://help.salesforce.com/s/articleView?language=en_US&id=sf.release_updates.htm&type=5)
- [Take Charge of Your Security Goals with Security Center](https://help.salesforce.com/s/articleView?id=sf.security_center.htm&language=en_US&type=5)
- [Security-Related Product Updates to the Salesforce Platform: User Identity, Data Protection, and Access Controls](https://help.salesforce.com/s/articleView?id=005317465&language=en_US&type=1)
- [MFA for Direct Salesforce Logins](https://help.salesforce.com/s/articleView?id=xcloud.security_mfa_overview.htm&language=en_US&type=5)
- [Monitor Setup Changes with Setup Audit Trail](https://help.salesforce.com/s/articleView?language=en_US&id=sf.admin_monitorsetup.htm&type=5)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 8 linked practice questions, and unlimited timed mock exams are included with the Platform Administrator II pack (USD $19): https://www.certifyforce.com/practice-exams