Auditing and Monitoring10% of the exam

Health Check, Security Center and release updates

How to review and fix security settings with Health Check (baselines, score, Fix Risks, notifications), when Security Center adds a multi-org view and alerts, and how to test and complete release updates and security enforcements before they change access.

Official exam objective
Explain how to review and troubleshoot security settings including pending updates that may change system access.

~7 min read · 8 practice questions ·

What the exam expects

  • Read a Health Check score against a baseline, remediate risks with Fix Risks or the Edit link, and explain why a score changes.
  • Choose the Health Check permission for viewing, exporting or importing baselines.
  • Decide when Security Center is needed instead of Health Check: many orgs, trends and alerts.
  • Use the Release Updates page tabs, test runs and Complete Steps By dates to prepare for updates that change access, including MFA and step-up authentication.

Key terms: baseline (recommended values for each security setting, the Salesforce Baseline Standard or a custom one); Fix Risks (changes selected settings to the baseline's values); release update (a platform change scheduled for enforcement in a release); test run (a toggle that enables an update early); parent tenant (the Security Center org that shows connected child tenants).

Key facts

Custom baselines
Detail
Up to five
Score drop with no changes
Detail
New signals can be introduced
Setting missing from Fix Risks
Detail
Change it with the Edit link
Score notifications
Detail
Weekly, to chosen users, when the score decreases
View and export baselines
Detail
View Health Check
Security Center licence
Detail
Add-on for Enterprise and Unlimited; free in Developer Edition
Security Center data
Detail
Stored for 6 months
Overdue tab
Detail
Past Complete Steps By, steps not done
Test run
Detail
Enables the update immediately; sandbox periods may end earlier
Step-up with SSO
Detail
Non-Salesforce MFA methods can't satisfy it
Sources for this section (4)
  • Why can a Health Check score drop when the Setup Audit Trail shows no changes?
  • When is Security Center needed instead of Health Check?
  • What happens when you enable a release update's test run?
  • Why should SSO users register a Salesforce MFA method before step-up authentication for reports is enforced?

The questions are free to read. Answers with their sources and self-grading are included with the pack.

Keep reading with the Platform Administrator II pack

  • Core concepts
  • Exam traps
  • Worked scenario

The pack includes:

  • All 29 lessons of the Platform Administrator II guide, with reading progress
  • Interactive decision walks and step-by-step sequence steppers
  • Inline practice questions and one-click topic practice (8 questions for this lesson)
  • An official source cited for every claim
  • An AI tutor that answers from the guide
  • Unlimited timed practice exams

Practice for the Platform Administrator II exam