Free Salesforce Agentforce-Specialist Practice Exam with Questions & Answers | Set: 8

The AgentForce Inter-Agent Communication and Security Configuration Guide specifies that when sensitive identity data (like a verified customer ID) must be shared between agents, the correct approach is to use the Agent API to initiate the downstream agent’s session. The verified data should be passed as a read-only context variable, ensuring persistence across sessions while preventing modification by the large language model (LLM).

This setup maintains data integrity and security compliance by isolating sensitive variables from the LLM’s reasoning layer. Context variables passed via the Agent API are immutable during runtime, ensuring they cannot be altered or exposed in agent-generated responses.

Option A adds unnecessary data persistence and complexity. Option B is insecure because conversation variables are exposed to the LLM context, risking unintended modification or leakage.

Therefore, the most secure and compliant configuration is Option C – Use the Agent API to pass verified IDs as read-only context variables between agents.

In Salesforce’s Einstein Studio (part of the Agentforce ecosystem), creating a custom retriever involves setting up a mechanism to fetch data for AI prompts or responses. The essential step is defining the foundation of the retriever: selecting the search index, specifying the data model object (DMO), and identifying the data space (Option A). These elements establish where and what the retriever searches:

Search Index: Determines the indexed dataset (e.g., a vector database in Data Cloud) the retriever queries.

Data Model Object (DMO): Specifies the object (e.g., Knowledge Articles, Custom Objects) containing the data to retrieve.

Data Space: Defines the scope or environment (e.g., a specific Data Cloud instance) for the data.

Filters are noted as optional in Option A, which is accurate—they enhance precision but aren’t mandatory for the retriever to function. This step is foundational because without it, the retriever lacks a target dataset, rendering it unusable.

Option B: Defining output configuration (e.g., max results, field mapping) is important for shaping the retriever’s output, but it’s a secondary step. The retriever must first know where to search (A) before output can be configured.

Option C: This option includes advanced configurations (vector/hybrid search, filtering fields, ranking method), which are valuable but not essential. A basic retriever can operate without specifying search type or ranking, as defaults apply, but it cannot function without a search index, DMO, and data space.

Option A: This is the minimum required step to create a functional retriever, making it essential.

Option A is the correct answer as it captures the core, mandatory components of retriever setup in Einstein Studio.

The AgentForce Data Cloud Retrieval and Ranking Guide highlights that when outdated Knowledge articles appear before newer ones, administrators should configure ranking factors that prioritize content based on recency. The documentation specifies: “Adding a recency ranking factor using the LastModifiedDate or LastPublishedDate fields ensures the retrieval prioritizes the most up-to-date documents, improving response relevance.”

Option A (disabling keyword index) would remove precision in retrieval and does not address recency.

Option B (changing chunking strategy) affects data segmentation, not ranking order.

Therefore, Option C — adding a ranking factor for recency — is the correct way to ensure updated articles are prioritized.

References (AgentForce Documents / Study Guide):

AgentForce Data Cloud Hybrid Search Configuration Guide: “Applying Recency Ranking”

AgentForce Knowledge Management Handbook: “Prioritizing Updated Articles in Search”

AgentForce Study Guide: “Ranking and Weighting Strategies for Knowledge Retrieval”

Agent currently supports various actions like creating and updating records but does not support the Delete Record action. Therefore, the user's request to delete activities from the past 7 days cannot be fulfilled using Agent.

Unsupported Action: The inability to delete records is due to the current limitations of Agent's supported actions. It is designed to assist with tasks like data retrieval, creation, and updates, but for security and data integrity reasons, it does not facilitate the deletion of records.

User Permissions: Even if the user has the necessary permissions to delete records within Salesforce, Agent itself does not have the capability to execute delete operations.

In Agentforce, a Knowledge-based data library (e.g., via Salesforce Knowledge or Data Cloud grounding) uses identifying fields and content fields to support AI responses. Let’s analyze their roles.

Option A: Identifying fields help locate the correct Knowledge article, while content fields enrich AI responses with detailed information.In a Knowledge-based data library, identifying fields (e.g., Title, Article Number, or custom metadata) are used to search and pinpoint the relevant Knowledge article based on user input or context. Content fields (e.g., Article Body, Details) provide the substantive data that the AI uses to generate detailed, enriched responses. This distinction is critical for grounding Agentforce prompts and aligns with Salesforce’s documentation on Knowledge integration, making it the correct answer.

Option B: Identifying fields categorize articles for indexing purposes, while content fields provide a brief summary for display.Identifying fields do more than categorize—they actively locate articles, not just index them. Content fields aren’t limited to summaries; they include full article content for response generation, not just display. This option underrepresents their roles and is incorrect.

Option C: Identifying fields highlight key terms for relevance scoring, while content fields store the full text of the article for retrieval.While identifying fields contribute to relevance (e.g., via search terms), their primary role is locating articles, not just scoring. Content fields do store full text, but their purpose is to enrich responses, not merely enable retrieval. This option shifts focus inaccurately, making it incorrect.

Why Option A is Correct:

The primary difference—identifying fields for locating articles and content fields for enriching responses—reflects their roles in Knowledge-based grounding, as per official Agentforce documentation.

Universal Containers (UC) has concerns about data privacy when using Salesforce's generative AI features, particularly around preventing third-party LLMs from accessing or retaining their data. The Zero-Data Retention Policy in the Einstein Trust Layer is designed to address these concerns by ensuring that:

No data is used for training or product improvements by third-party LLMs.

No data is retained outside of the customer's Salesforce organization.

The LLM provider cannot access any customer data.

This policy aligns perfectly with UC’s requirements for keeping their data safe while leveraging generative AI capabilities.

Prompt Defense and Data Masking are also security features, but they do not directly address the concerns related to third-party data access and retention.

Per the AgentForce Security and Permission Management Guide, the AgentForceServiceAgentUserPsg (Permission Set Group) controls access privileges for Service Agents, including which Salesforce objects, fields, and related data they can read or interact with.

When extending an agent’s access to additional custom fields or related objects, the documented best practice is to update the existing permission set group assigned to that agent type rather than creating new or profile-based permissions. This approach maintains centralized permission governance, ensures license alignment, and avoids conflicts or redundancy across multiple permission layers.

Option B is incorrect because creating a new permission set with an Einstein Agent License is unnecessary — the permission set group already includes license mappings. Option C is not recommended, as editing the Einstein Agent User Profile can cause system-wide effects and deviate from Salesforce’s principle of least privilege.

Therefore, the correct approach is Option A – Update the Object and Field access in the AgentForceServiceAgentUserPsg permission set group, ensuring secure and proper access for the Service Agent to custom case data.

When a prompt template version is immutable, it means that once the version is activated, it cannot be edited or modified. This ensures consistency in production environments where changes could disrupt workflows.

Option A is incorrect: Any version (not just the latest) can be activated, depending on the use case.

Option D is incorrect: Modifications require manually creating a new version; automatic versioning is not enforced.

Option C is correct: Activation locks the version, enforcing immutability.

To integrate web activity data from Data Cloud into a prompt template, the correct approach is to enrich the Contact object with the activity records as a related list and use related list grounding (Option B). Here’s why:

Data Cloud Integration: Data Cloud unifies web activity data and associates it with the unified Contact record. By adding these activities as a related list to the Contact, the data becomes accessible to the prompt template.

Prompt Template Grounding: Salesforce prompt templates support grounding on related records. When the Contact is passed to the prompt template, the template can reference the related web activity records (via the related list) to extract insights.

Structured Data Handling: This method aligns with Salesforce best practices for grounding, ensuring the large language model (LLM) receives structured, context-rich data without overwhelming it with raw activity lists.

Why Other Options Are Incorrect:

A. Calling the prompt directly from Data Cloud: Prompt templates are invoked within Salesforce, not directly from Data Cloud. Grounding requires associating data with Salesforce objects, not ad-hoc web activity inclusion.

C. Passing a list of activity records as input: While technically possible, this bypasses Salesforce’s grounding framework, which relies on object relationships. It also risks exceeding LLM input limits and lacks scalability.

The Agentforce Testing Center is a tool in Agentforce Studio for validating agent performance. Let’s evaluate the statements.

Option A: Running tests risks modifying CRM data in a production environment.Agentforce Testing Center runs synthetic interactions in a controlled environment (e.g., sandbox or isolated test space) and doesn’t modify live CRM data. It’s designed for safe pre-deployment testing, making this incorrect.

Option B: Running tests does not consume Einstein Requests.Einstein Requests are part of the usage quota for Einstein Generative AI features (e.g., prompt executions in production). Testing Center uses synthetic data to simulate interactions without invoking live AI calls that count against this quota. Salesforce documentation confirms tests don’t consume requests, making this the correct answer.

Option C: Agentforce Testing Center can only be used in a production environment.Testing Center is available in both sandbox and production orgs, but it’s primarily used pre-deployment (e.g., in sandboxes) to validate agents safely. This restriction is false, making it incorrect.

Why Option B is Correct:

Not consuming Einstein Requests is a key feature of Testing Center, allowing extensive testing without impacting quotas, as per Salesforce documentation.