EX-Con-101 Experience Cloud Consultant Practice Questions
Prepare for EX-Con-101 with more than an answer.
- 1
A consultant is advising on the setup of a public-facing Help Center. The client is concerned about 'clickjacking' attacks. Which security setting in Experience Builder specifically addresses this vulnerability?
Show answer details
Correct answer: B
In Experience Builder Site Administration, under Pages, there is a specific setting for Clickjack Protection. It controls whether the site can be framed by other pages. Setting this to 'Allow framing by the same origin only' or 'Don't allow framing' prevents clickjacking.
- 2
A University uses Experience Cloud for its Student Portal. They want to create a sense of community by rewarding students who answer questions in the forums. They need a system that awards points and displays a leaderboard. Which feature set should be enabled?
Show answer details
Correct answer: B
Enabling Reputation in the Experience Workspace allows for the configuration of Points for specific actions (like answering a question) and Levels (thresholds of points). This native gamification feature drives adoption.
- 3
A consultant is designing a deployment strategy for an Experience Cloud site. The site includes custom LWC components, a custom Theme Layout, and standard navigation menus. The deployment will move from a Sandbox to Production. Which metadata type must be included to ensure the site's structure and page associations are deployed correctly?
Show answer details
Correct answer: B
ExperienceBundle is the metadata type that represents the site structure, branding, themes, and page configurations in a human-readable format. It replaces the older binary SiteDotCom file for Lightning communities and is essential for accurate deployment of site structure.
- 4
A multinational manufacturing corporation is deploying a Partner Portal using the Partner Central template. They require a complex sharing model where regional distributors need access to the leads of local resellers they manage, but resellers should not see each other's data. The distributors and resellers belong to different accounts. Which sharing mechanism provides the most scalable architecture for this hierarchical cross-account access requirement?
Show answer details
Correct answer: B
Account Relationship Data Sharing (ARDS) is specifically designed for this use case where distinct external accounts need hierarchical or peer-to-peer data access without forcing them into the same standard Role Hierarchy. It allows defining a relationship type (e.g., 'Distributor-Reseller') and sharing rules based on that relationship.
- 5
Global FinCorp is launching a customer self-service site. They require that customers can only register if they already have a Contact record in Salesforce with a unique Membership ID. If the user attempts to register and the Membership ID does not match an existing Contact, registration should fail. Which authentication configuration satisfies this requirement?
Show answer details
Correct answer: C
A custom Apex Self-Registration Handler (implementing
Auth.ConfigurableSelfRegHandler) provides the logic hook necessary to query the database for an existing Contact with the specific Membership ID before creating a User. Standard configuration cannot perform this conditional validation logic. - 6
An Experience Cloud Consultant is optimizing the performance of a high-traffic public site. The site uses the Customer Service (Napili) template. The consultant notes that the site's Time to First Byte (TTFB) is higher than expected for global users. Which combination of actions should the consultant take to improve performance? (Select TWO)
Show answer details
Correct answer: A, C
Enabling the Salesforce CDN caches public content at edge locations closer to the user, significantly reducing TTFB for global audiences.
Progressive Rendering prioritizes the display of main page content while loading secondary components in the background, improving the perceived load time and user experience.
