Big objects, custom settings and external object access

What the exam expects

• Secure a custom big object with object and field permissions, knowing which sharing and automation features it lacks.
• Grant read access to one custom setting or one custom metadata type without Customize Application, and know what Restrict access does.
• Decide where secrets belong: protected settings or metadata in a managed package, otherwise named credentials or encrypted fields.
• Choose the Salesforce Connect identity type that makes the external system enforce each user's own entitlements.
• Recognise Apex controllers that can expose data, and the explicit access modes that close the gap.

Key terms: big object (horizontally scalable store for billions of rows); Restrict access to custom settings (Schema Settings preference requiring explicit Read grants); protected visibility (readable only by its managed package's code); identity type (whose credentials reach the external system); access mode (user or system enforcement of permissions on a database operation).

Key facts

Check yourself