Architecture Design18% of the exam
Data security, encryption and residency boundaries
How to meet security and residency requirements across Marketing Cloud Personalization and the service org: what beacon self-hosting does and doesn't change, PGP-encrypted ETL files, Sensitive versus Personally Identifiable attributes, and Shield Platform Encryption key choices, rotation, recovery and field limits.
Given data security and residency requirements, recommend an appropriate solution and describe how the solution's considerations can impact implementation.
~6 min read · 10 practice questions
What the exam expects
- Separate where code is delivered from where customer data is processed when assessing residency.
- Assign customer duties for a self-hosted Personalization beacon.
- Protect Personalization ETL files and sensitive profile values, and know what masking doesn't cover.
- Choose a Shield key-management option and plan rotation, data sync and key recovery.
- Spot fields and features that Shield doesn't encrypt or that need extra steps.
Key terms:
- JavaScript beacon: the Personalization script that collects browser behavior and sends it to Personalization servers.
- Sensitive attribute: a profile attribute whose value is masked for roles without View Sensitive.
- Tenant secret: org-specific Shield key material used to derive data encryption keys.
- Cache-only key: customer-held key material that Shield fetches on demand and never persists.
- Data sync: the Shield process that applies current encryption policy and key material to existing data.
Key facts
Self-hosted beacon
- Detail
- No Personalization toggle; customer disables and monitors
Beacon data path
- Detail
- Browser to Personalization servers over SSL
PGP ETL files
- Detail
- Personalization public key; decrypted only while processing
Masking
- Detail
- Only Sensitive attributes are hidden
API tokens
- Detail
- Bypass sensitive restrictions
Cache-only keys
- Detail
- Never persisted in a system of record or backups
Background encryption
- Detail
- Once every 7 days
After key rotation
- Detail
- Deactivate and reactivate custom matching rules
Destroyed key material
- Detail
- Data inaccessible unless exported material is imported
Web-to-Case
- Detail
- Web Company, Web Email, Web Name, Web Phone not encrypted at rest
Sources for this section (6)
- Web Integration Considerationsdeveloper.salesforce.com (opens in a new tab)
- Sensitive User Informationhelp.salesforce.com (opens in a new tab)
- Encrypt Sensitive Datahelp.salesforce.com (opens in a new tab)
- Cache-Only Key Servicehelp.salesforce.com (opens in a new tab)
- Shield Considerationshelp.salesforce.com (opens in a new tab)
- Destroy Key Materialhelp.salesforce.com (opens in a new tab)
- When must a self-hosted Personalization beacon be refreshed?
- When does Shield's self-service background encryption refuse to run?
- Which key material format does the Cache-Only Key Service accept?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the B2C Solution Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 20 lessons of the B2C Solution Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (10 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both