Plat-Arch-202 Salesforce Platform Development Lifecycle and Deployment Architect Free Practice Exam Questions (2026 Updated)

The correct selection is A, D. HTTP callouts in Apex tests require mocks, and mocks more broadly isolate a unit from dependencies whose state or behavior must be controlled. They make tests deterministic and let developers simulate success and failure conditions without contacting external systems or bypassing normal Batch Apex testing patterns. From a testing perspective, the goal is deterministic evidence that the solution behaves correctly under the conditions that matter. Tests should isolate external dependencies, use controlled data, exercise positive and negative paths, and reproduce realistic volume or user behavior where required without making production the first place defects are discovered. The alternatives do not provide equivalent evidence: they either validate only a narrow implementation detail or depend on conditions outside the test ' s control. For this scenario, the decisive point is therefore the platform behavior represented by the selected options (A. Mock is needed whenever the code makes an HTTP callout.; D. Using a Mock allows the test class to bypass the dependencies of other objects, methods, state, or behaviors. Therefore, the developer has total control of his own code.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Testing — Apex testing; test-data isolation; mocks; regression testing; performance/load testing; sandbox test strategy.

The correct selection is A, B. Automated test-data loads can run unattended as part of environment preparation and produce consistent, repeatable results. They are well suited to CI/CD scripting, reduce manual variation, and make test outcomes more comparable across repeated executions. From a testing perspective, the goal is deterministic evidence that the solution behaves correctly under the conditions that matter. Tests should isolate external dependencies, use controlled data, exercise positive and negative paths, and reproduce realistic volume or user behavior where required without making production the first place defects are discovered. The alternatives do not provide equivalent evidence: they either validate only a narrow implementation detail or depend on conditions outside the test ' s control. For this scenario, the decisive point is therefore the platform behavior represented by the selected options (A. Automated loads can be done with no human oversight.; B. Automated loads are reliable in their results.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Testing — Apex testing; test-data isolation; mocks; regression testing; performance/load testing; sandbox test strategy.

The correct selection is A. Permission-set changes are metadata and should be retrieved, committed, reviewed, and processed through CI just like code. This makes security changes visible to developers early and prevents production-only permission drift from causing unexpected SOQL or access failures later in the lifecycle. From a build perspective, the implementation should be source-driven, reviewable, automatable, and modular. Engineering controls such as version control, package boundaries, static analysis, coding standards, and isolated development environments reduce defects early and make changes easier to understand, test, and promote. The rejected choices either rely on manual review alone, use the wrong development abstraction, or introduce custom complexity where Salesforce already provides a source-driven engineering mechanism. For this scenario, the decisive point is therefore the platform behavior represented by the selected option (A. Extract each permission set, commit and merge to source control, and run through CI checks.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Building — Salesforce DX; package development; coding standards; static analysis; source control; secure development.

The correct selection is D. A requirements traceability matrix maps each approved requirement or acceptance criterion to one or more test cases and execution results. It is the artifact specifically designed to prove that UAT coverage is complete and that no requirement has been left without validation. From a testing perspective, the goal is deterministic evidence that the solution behaves correctly under the conditions that matter. Tests should isolate external dependencies, use controlled data, exercise positive and negative paths, and reproduce realistic volume or user behavior where required without making production the first place defects are discovered. The other options are weaker because they sacrifice isolation, realism, or repeatability and therefore make failures harder to reproduce and diagnose across environments. For this scenario, the decisive point is therefore the platform behavior represented by the selected option (D. Requirement traceability matrix). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Testing — Apex testing; test-data isolation; mocks; regression testing; performance/load testing; sandbox test strategy.

The correct selection is B. A Metadata API-formatted release artifact should be validated and deployed consistently using the Metadata API deployment mechanism. Mixing source-format and mdapi commands introduces needless conversion risk, and because quick deploy is excluded, the normal deployment must run after successful validation. From a deployment perspective, the same release should be reproducible across environments, with dependencies, metadata/data differences, API behavior, and target-org constraints identified before production. Automation is valuable because it turns deployment knowledge into a controlled process rather than relying on memory or manual reconstruction. The alternatives are less reliable because they do not provide the same controlled handling of metadata, data relationships, validation, or environment-specific dependencies. For this scenario, the decisive point is therefore the platform behavior represented by the selected option (B. Authorize to the Full sandbox org; Validate with sfdx:mdapi:deploy On successful validation, deploy with sfdx:mdapi:deploy). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Deploying — Metadata API and Tooling API; deployment validation; package/change-set deployment; data migration; dependency management.

The correct selection is A, B, C. Performance testing must be coordinated with Salesforce in advance, run in an appropriate sandbox, and may be monitored to protect the multitenant service. Large-scale testing should not be executed against production or launched without the required notice and test-plan coordination. From a testing perspective, the goal is deterministic evidence that the solution behaves correctly under the conditions that matter. Tests should isolate external dependencies, use controlled data, exercise positive and negative paths, and reproduce realistic volume or user behavior where required without making production the first place defects are discovered. The alternatives do not provide equivalent evidence: they either validate only a narrow implementation detail or depend on conditions outside the test ' s control. For this scenario, the decisive point is therefore the platform behavior represented by the selected options (A. Salesforce must be informed at least 7 days before starting performance tests.; B. Salesforce will monitor test activity to ensure there are no issues with Salesforce Services.; C. Performance tests must be run in a sandbox.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Testing — Apex testing; test-data isolation; mocks; regression testing; performance/load testing; sandbox test strategy.

The correct selection is C. A Metadata API deployment is driven by package.xml, which is a machine-readable manifest of the components to retrieve or deploy. Giving release management the manifest creates a reproducible handoff without granting the architect production access or relying on manual spreadsheets and audit logs. From a deployment perspective, the same release should be reproducible across environments, with dependencies, metadata/data differences, API behavior, and target-org constraints identified before production. Automation is valuable because it turns deployment knowledge into a controlled process rather than relying on memory or manual reconstruction. The rejected alternatives do not meet the deployment requirement because they introduce drift, ignore target-org compatibility, or substitute a convenience tool for a reproducible release artifact. For this scenario, the decisive point is therefore the platform behavior represented by the selected option (C. Create a change set in each sandbox and download the package.xml file for the release management team.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Deploying — Metadata API and Tooling API; deployment validation; package/change-set deployment; data migration; dependency management.

The correct selection is A, B, C. Scrum tooling must support the ordered product backlog, sprint backlog, and assignment or ownership of actionable work. Those capabilities map directly to Scrum planning and execution, whereas email alerts or a generic Kanban view are supporting conveniences rather than the core Scrum controls being asked for. From a system-design perspective, the decision should minimize unnecessary coupling while preserving clear ownership, scalability, governance, and extensibility. Salesforce architecture is strongest when boundaries reflect real business and technical responsibilities instead of using organizational convenience as the primary design driver. The other options introduce tighter coupling, duplicate governance, or solve a different architectural concern and therefore do not satisfy the stated boundary and ownership requirements. For this scenario, the decisive point is therefore the platform behavior represented by the selected options (A. Product backlog prioritization; B. Sprint backlog management; C. Work (for example, user stories or tasks) assignment). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: System Design — org strategy; modular architecture; integration topology; data ownership; enterprise governance; scalability.

The correct selection is B, D. Consistent coding standards reduce the cognitive effort needed to understand code across multiple teams, while version control provides change history for root-cause analysis. Together they improve maintainability and defect traceability without creating a centralized review bottleneck. From a build perspective, the implementation should be source-driven, reviewable, automatable, and modular. Engineering controls such as version control, package boundaries, static analysis, coding standards, and isolated development environments reduce defects early and make changes easier to understand, test, and promote. The alternatives do not create the same repeatable engineering control: they either postpone defect detection, couple teams unnecessarily, or bypass the package/source model that should govern the change. For this scenario, the decisive point is therefore the platform behavior represented by the selected options (B. Define and follow code standards.; D. Version control system to identify who is generating the bugs.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Building — Salesforce DX; package development; coding standards; static analysis; source control; secure development.

The correct selection is C, D, E. Migration testing must confirm transformed values, record ownership, and referential integrity. Account and Lead ownership affects access and reporting, source-to-target transformations must reconcile correctly, and Contacts must remain associated with the proper Accounts after identifier remapping. From a testing perspective, the goal is deterministic evidence that the solution behaves correctly under the conditions that matter. Tests should isolate external dependencies, use controlled data, exercise positive and negative paths, and reproduce realistic volume or user behavior where required without making production the first place defects are discovered. The rejected choices either test the wrong layer, introduce live-system dependencies, or detect problems too late to provide the deterministic early feedback expected from a mature test strategy. For this scenario, the decisive point is therefore the platform behavior represented by the selected options (C. Account and Lead ownership; D. Data transformation against source system; E. Contact association with contact account). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Testing — Apex testing; test-data isolation; mocks; regression testing; performance/load testing; sandbox test strategy.

The correct selection is B. A conflict becomes visible when GitHub evaluates the ServiceCase pull request against the now-updated UCDev target branch. Local add, commit, and push operations do not attempt that merge and therefore do not inherently reveal the target-branch conflict. From a build perspective, the implementation should be source-driven, reviewable, automatable, and modular. Engineering controls such as version control, package boundaries, static analysis, coding standards, and isolated development environments reduce defects early and make changes easier to understand, test, and promote. The rejected choices either rely on manual review alone, use the wrong development abstraction, or introduce custom complexity where Salesforce already provides a source-driven engineering mechanism. For this scenario, the decisive point is therefore the platform behavior represented by the selected option (B. The conflict would show in GitHub when a pull request is created from ServiceCase to UCDev.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Building — Salesforce DX; package development; coding standards; static analysis; source control; secure development.

The correct selection is A, C. Aura accessibility checks can be invoked in JavaScript tests and WebDriver-based browser tests. Those environments can inspect rendered DOM behavior for common accessibility violations, making accessibility a repeatable part of automated component quality rather than a purely manual review. From a testing perspective, the goal is deterministic evidence that the solution behaves correctly under the conditions that matter. Tests should isolate external dependencies, use controlled data, exercise positive and negative paths, and reproduce realistic volume or user behavior where required without making production the first place defects are discovered. The other options are weaker because they sacrifice isolation, realism, or repeatability and therefore make failures harder to reproduce and diagnose across environments. For this scenario, the decisive point is therefore the platform behavior represented by the selected options (A. JSTEST; C. WebDriver Test). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Testing — Apex testing; test-data isolation; mocks; regression testing; performance/load testing; sandbox test strategy.

The correct selection is D. Automated tests should run frequently in development and at merge points. Daily execution catches drift and regressions early, while merge-triggered CI verifies that independently valid changes still work once integrated into the shared codebase. From a testing perspective, the goal is deterministic evidence that the solution behaves correctly under the conditions that matter. Tests should isolate external dependencies, use controlled data, exercise positive and negative paths, and reproduce realistic volume or user behavior where required without making production the first place defects are discovered. The rejected choices either test the wrong layer, introduce live-system dependencies, or detect problems too late to provide the deterministic early feedback expected from a mature test strategy. For this scenario, the decisive point is therefore the platform behavior represented by the selected option (D. Automated tests should be run daily in all Developer Orgs, and when branches are merged.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Testing — Apex testing; test-data isolation; mocks; regression testing; performance/load testing; sandbox test strategy.

The correct selection is D. A complete rollback must restore previously existing metadata and remove components introduced by the failed release. A pre-release baseline plus destructiveChanges.xml for newly added components gives a reproducible reverse deployment; simply redeploying the old metadata does not automatically delete new components. From a release perspective, approved functionality must be isolated from unfinished work and promoted through a predictable, auditable path. Release calendars, validation, stakeholder approval, rollback planning, and branch discipline reduce the risk that a technically correct change becomes an operational failure during production promotion. The rejected alternatives weaken release control by mixing development states, skipping required validation, or treating production promotion as an ad hoc administrative task. For this scenario, the decisive point is therefore the platform behavior represented by the selected option (D. Create a sandbox from production to take the backup of existing metadata. To roll back deployment, use destructivechanges.xml to delete new components and then Deploy again to production using metadata from this sandbox.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Releasing — release management; branching and hotfixes; production readiness; rollback strategy; seasonal releases; approvals.

The correct selection is C. Package development requires the Dev Hub packaging capability for unlocked and second-generation managed packages. Enabling that combined setting supports creation and versioning of package artifacts; source tracking alone or an imagined unlocked-only setting does not establish the full package-development capability. From a build perspective, the implementation should be source-driven, reviewable, automatable, and modular. Engineering controls such as version control, package boundaries, static analysis, coding standards, and isolated development environments reduce defects early and make changes easier to understand, test, and promote. The alternatives do not create the same repeatable engineering control: they either postpone defect detection, couple teams unnecessarily, or bypass the package/source model that should govern the change. For this scenario, the decisive point is therefore the platform behavior represented by the selected option (C. In setup, switch the Enable Unlocked Packages and Second-Generation Managed Packages to Enabled.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Building — Salesforce DX; package development; coding standards; static analysis; source control; secure development.

The correct selection is A, D. Direct Metadata API retrieve() and deploy() calls are primary when custom code or tooling itself must programmatically move metadata. If Salesforce CLI or the Ant Migration Tool is already being used, those clients wrap the API and the developer normally invokes the tool instead of writing direct API calls. From a deployment perspective, the same release should be reproducible across environments, with dependencies, metadata/data differences, API behavior, and target-org constraints identified before production. Automation is valuable because it turns deployment knowledge into a controlled process rather than relying on memory or manual reconstruction. The other choices either rely on manual reconstruction, use a deployment mechanism designed for a different scope, or fail to preserve dependencies and repeatability across target environments. For this scenario, the decisive point is therefore the platform behavior represented by the selected options (A. Team development of an application in a Developer Edition organization. After completing development and testing, the application is Distributed via Lightning Platform AppExchange.; D. Development of a custom application in a sandbox organization. After completing development and testing, the application is then deployed Into a production organization using Metadata API.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Deploying — Metadata API and Tooling API; deployment validation; package/change-set deployment; data migration; dependency management.

The correct selection is A. Checkmarx findings must be reviewed individually. Real vulnerabilities should be remediated; legitimate false positives should be documented with a technical justification and included in the AppExchange security-review submission rather than ignored or mechanically changed simply to produce a zero-warning report. From a build perspective, the implementation should be source-driven, reviewable, automatable, and modular. Engineering controls such as version control, package boundaries, static analysis, coding standards, and isolated development environments reduce defects early and make changes easier to understand, test, and promote. The alternatives do not create the same repeatable engineering control: they either postpone defect detection, couple teams unnecessarily, or bypass the package/source model that should govern the change. For this scenario, the decisive point is therefore the platform behavior represented by the selected option (A. Review the Checkmarx errors. If there is no need to fix, mark them as false positive and attach explanation, then submit.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Building — Salesforce DX; package development; coding standards; static analysis; source control; secure development.

The correct selection is C, D. Regulated production changes require explicit approval and post-deployment verification. Approval establishes accountable authorization before implementation, while controlled production smoke testing and monitoring confirm the deployed release behaves as intended and provide evidence for the audit trail. From a release perspective, approved functionality must be isolated from unfinished work and promoted through a predictable, auditable path. Release calendars, validation, stakeholder approval, rollback planning, and branch discipline reduce the risk that a technically correct change becomes an operational failure during production promotion. The rejected alternatives weaken release control by mixing development states, skipping required validation, or treating production promotion as an ad hoc administrative task. For this scenario, the decisive point is therefore the platform behavior represented by the selected options (C. Any production change should have explicit stakeholder approval.; D. After deployment, the development team should test and verify functionality in production.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Releasing — release management; branching and hotfixes; production readiness; rollback strategy; seasonal releases; approvals.

The correct selection is A. The workflow and trigger are a business-process enhancement rather than an emergency fix or architectural overhaul, so they fit a minor release. Because the opportunity renewal process changes for users, the release should include communication, readiness, training, and change-management activities. From a release perspective, approved functionality must be isolated from unfinished work and promoted through a predictable, auditable path. Release calendars, validation, stakeholder approval, rollback planning, and branch discipline reduce the risk that a technically correct change becomes an operational failure during production promotion. The rejected alternatives weaken release control by mixing development states, skipping required validation, or treating production promotion as an ad hoc administrative task. For this scenario, the decisive point is therefore the platform behavior represented by the selected option (A. Plan this as a minor release with training and change management.). Applying that rule consistently keeps the implementation aligned with Salesforce-supported lifecycle practices and makes the resulting change easier to review, validate, and operate across environments.

Study Guide reference: Releasing — release management; branching and hotfixes; production readiness; rollback strategy; seasonal releases; approvals.