A customer compliance department requires encryption at rest, notification of activities, and extensive field tracking. What are some key…

The customer's requirements for encryption at rest, notification of activities, and extensive field tracking directly map to the features offered by the Salesforce Shield product suite. Salesforce Shield provides Platform Encryption for encrypting data at rest, Event Monitoring for tracking user activities and enabling notifications through Transaction Security Policies, and Field Audit Trail for extensive, long-term field history tracking. Configuring Data Classification is a foundational best practice for identifying which data is sensitive and requires these advanced compliance controls, making it an integral part of the implementation strategy.

A. This option lists standard security controls (Role Hierarchy, password policies, IP restrictions) that manage access but do not provide encryption at rest, extensive field tracking, or detailed activity notifications.
B. While Field Audit Trail and encryption are relevant, two-factor authentication is an identity verification control, not a tool for monitoring post-login data access, usage, or providing extensive field tracking.
D. The Security Health Check is a diagnostic tool, not an implementation feature. Profiles and permission sets manage data access, but do not meet the specific encryption or extensive auditing requirements mentioned.

1. Salesforce Help Documentation, "Salesforce Shield": "Salesforce Shield is a trio of security tools that helps you build an extra layer of trust, compliance, and governance right into your business-critical apps. It includes Shield Platform Encryption, Shield Event Monitoring, and Shield Field Audit Trail." This directly aligns the product suite with the question's requirements.

2. Salesforce Help Documentation, "Shield Platform Encryption": "Shield Platform Encryption gives your data a whole new layer of security while preserving critical platform functionality. It enables you to encrypt sensitive data at rest..." This source validates the "encryption at rest" component.

3. Salesforce Help Documentation, "Event Monitoring": "Event Monitoring is one of the many tools that Salesforce provides to help keep your data secure... See who is accessing critical business data, when they are accessing it, and from where... You can also use this information to set up transaction security policies." This source validates the "notification of activities" component.

4. Salesforce Help Documentation, "Field Audit Trail": "With Field Audit Trail, you can know the state and value of your data for any date, at any time... Field Audit Trail lets you define a policy to retain archived field history data up to 10 years..." This source validates the "extensive field tracking" component.

5. Salesforce Help Documentation, "Set Up Data Classification": "Before you can protect your data, you have to know what kind of data you have... Data classification is a key first step toward understanding the data in your Salesforce org and, in turn, protecting it." This source validates Data Classification as a key consideration.