Free Salesforce Comm-Dev-101 Practice Exam with Questions & Answers

Among the supplied choices, B is the only approach consistent with robust B2C Commerce integration design: the application must inspect service results, preserve useful diagnostic information, and implement controlled error behavior rather than blindly proceeding.

However, " log all responses " must be interpreted according to Salesforce ' s secure logging practices. Raw responses mustnotbe persisted indiscriminately when they contain passwords, access tokens, personal information, payment data, or other sensitive content. B2C Commerce ' s Service Framework provides logging controls such as response/request filtering specifically so that sensitive information can be removed before it reaches diagnostic logs.

Ignoring a failed API response, as in A, can produce corrupt application state or misleading storefront behavior. Option C is equally problematic because silently converting failures into successful responses prevents calling code and shoppers from receiving appropriate failure handling.

A correct production implementation examines the Service Framework result, logs sanitized diagnostic context where appropriate, implements fallback behavior when the business process allows it, and returns a controlled application response.

Study Guide reference:Application Development — Service Framework, external API integrations, service result handling, secure logging, exception management, and graceful failure behavior.

===============

OCAPI permissions are configured againstresource IDs, not against one particular inventory-list identifier embedded in an individual request. In the example URL, the principal API resource family isinventory_lists;ecom-inventoryis merely the identifier of the particular inventory list being accessed.

Therefore, the developer should inspect the OCAPI Data API settings for a resource rule covering theinventory_listsresource path, such as an appropriate/inventory_lists/...pattern, and verify that the required HTTP method and attribute selectors have been permitted.

Theclient_ididentifies the external application whose permissions are being evaluated, but it does not identify the inventory API resource being enabled. Similarly,ecom-inventoryis instance/business data and should not be confused with the API resource family.

This distinction is central to OCAPI authorization. A client configuration associates a client ID with resource path patterns, allowed HTTP methods, andread_attributes/write_attributesselectors. Requests are authorized only when they match an enabled resource and method.

Study Guide reference:Application Development — OCAPI Data API, inventory-list resources, resource IDs, client permissions, HTTP methods, and inventory integrations.

===============

< isdecorate > is specifically designed for reusable page layouts. A page template wraps its page-specific content in < isdecorate template= " ... " > , while the decorator template defines the shared structural markup—typically the HTML shell, header, navigation, footer, and other common elements. The decorator contains < isreplace/ > at the position where the wrapped page-specific content is inserted.

Salesforce describes a typical < isdecorate > use case as decorating the page body with a common header and footer. This makes it the most effective mechanism for reducing repeated layout code across multiple storefront pages.

< isreplace > is not normally selected by the page that consumes the layout; it is placedinside the decorator templateto identify the insertion point. < isinclude > is useful for reusable partial templates but does not provide the same complete page-layout composition semantics.

Using decorators also improves maintainability: a change to the common header or footer is made once in the decorator rather than repeated across every page template.

Study Guide reference:Application Development — ISML template decorators, < isdecorate > , < isreplace > , common layouts, and reusable storefront presentation.

===============

Salesforce documents the two-argument form:

Logger.getLogger(fileNamePrefix, category)

The first argument controls the named log-file prefix, while the second controls category filtering. Custom application log files begin withcustom, and named logs therefore use the custom naming convention around the supplied file-name prefix.

That supportscustom-loggersFilewhenloggersFileis the configured file-name prefix. Option B would correspond to a different prefix (loggers), and C omits the custom-log naming convention.

Study Guide reference:Application Development —Logger.getLogger(fileNamePrefix, category), named custom logs, filename prefixes, and logging categories.

===============

dw.svc.LocalServiceRegistry.createService()is the standard Service Framework method for constructing a service instance from a service configured in Business Manager.

Salesforce ' s Script API defines:

LocalServiceRegistry.createService(serviceID, configObj)

The first argument identifies the configured Business Manager service, while the second supplies callbacks that define request construction, response parsing, logging filtering, mocking behavior, and other integration-specific behavior. The returned object is the actualServiceinstance used by application code.

Option B does not identify a supported creation API.LocalServiceInstanceis not the class developers instantiate to obtain configured B2C service objects. Option C likewise references a method that is not the documented LocalServiceRegistry creation mechanism.

A typical integration defines the service, profile, and credentials in Business Manager, callscreateService()in cartridge code, and subsequently invokes.call()on the returned service. This architecture externalizes environment-specific information—such as credentials, URLs, timeouts, and rate limits—from application source code.

Study Guide reference:Application Development — LocalServiceRegistry,createService(), Service Framework, service callbacks, profiles, credentials, and remote web-service integration.

===============

Theurlform of < isinclude > performs aremote include. In this example,URLUtils.url( ' Account-Header ' , ' mobile ' , true)constructs a URL for theAccount-Headerendpoint and supplies that URL to < isinclude > . B2C Commerce therefore makes a separate request to the generated endpoint and inserts the resulting response into the surrounding page.

Salesforce distinguishes this behavior from a local template include. A local include uses thetemplateattribute and incorporates another ISML template within the current rendering context. By contrast, an < isinclude > that specifiesurlis explicitly classified as a remote include and can execute another controller or pipeline endpoint.

Option B is therefore incorrect because the code does not use the local-template syntax. Option C is also incorrect:URLUtils.url()does construct a URL, but placing that URL in theurlattribute of < isinclude > does not render an anchor or navigational link. It causes the endpoint ' s output to be included in the current response.

Study Guide reference:Application Development — ISML includes, remote includes,URLUtils, controller endpoints, and composable storefront rendering.

===============

Custom storefront scripts arecode artifacts, not Business Manager metadata objects. Consequently, among the supplied options, B is the technically correct first step: create or define the required JavaScript/CommonJS script module within the project code structure.

Salesforce documents that B2C Commerce script modules are.js,.ds, or.jsonfiles and are normally stored in cartridges, commonly undercartridge/scripts. Modules expose public functionality throughexportsand are loaded withrequire(). Controllers and other server-side components can then import and invoke that reusable module.

Business Manager does not provide a general mechanism for creating arbitrary SFRA application scripts. Business Manager manages configuration, metadata, jobs, services, catalogs, and related platform data; deployable application logic belongs in cartridges/code versions.

Option C is less precise because the script/module itself must first be established in the codebase before its exported behavior can be consumed.

Study Guide reference:Application Development — CommonJS modules,cartridge/scripts, JavaScript modules,require(), exports, and cartridge-based application code.

===============

The configuration currently authorizes only HTTPGET, which is a read operation. Adding products to a basket changes server-side state and is performed through an OCAPI operation that usesPOST. The client ' s permitted-method list must therefore includepost.

OCAPI authorization is resource- and method-specific. Even thoughwrite_attributes: " (**) " permits all writable attributes for an otherwise authorized write request, it doesnotauthorize a missing HTTP method. The HTTP method itself must be explicitly listed in the resource configuration. Salesforce ' s OCAPI documentation identifies POST as a method used to create resources or execute actions that modify server state.

Option B changes the attribute selector but still leaves the client without POST permission, so the request remains unauthorized. Option C adds OPTIONS, which is associated with HTTP capability/CORS behavior and does not perform the basket modification.

Thus:

" methods " :[ " get " , " post " ]

allows the existing read access while also authorizing the required write operation.

Study Guide reference:Application Development — OCAPI configuration, resource permissions, HTTP methods, basket APIs, and read/write authorization.

===============

The new requirement is additive: the existingCart-Showbehavior should continue running, and the client cartridge only needs to add adataLayerproperty to the response. SFRA ' s preferred mechanism for this type of extension is toappend middleware to the existing routeand enrich its ViewData.

Salesforce documentsserver.appendas a controller-customization mechanism that executes the existing middleware chain and then adds an additional step. A common use is precisely to retrieve and update the current ViewData with extra properties that are needed during rendering.

This also preserves cartridge independence. Throughmodule.superModule, the client cartridge resolves the applicable controller immediately to its right on the cartridge path. If the LINK cartridge exists, its customized route participates. If it is later removed, resolution can fall through to the next implementation, such asapp_storefront_base, while the client ' s appended data-layer logic remains unchanged.

Replacing the entire route unnecessarily couples the client implementation to existing logic and duplicates behavior that SFRA ' s extension model already provides.

Study Guide reference:Application Development — SFRA controller extension,server.append,module.superModule, ViewData, cartridge precedence, and upgrade-safe customization.

===============

AnINFOmessage is written only when the configured logging threshold permits INFO-level events and INFO output is enabled for the relevant custom log destination. Setting the root level toDEBUGpermits DEBUG and all higher-severity messages, including INFO, WARN, ERROR, and FATAL. Enabling theInfolog-file option ensures that INFO messages are written to the applicable log file.

Salesforce ' s logging documentation explains that custom DEBUG and INFO logging can be enabled through Business Manager ' s custom log configuration and that the selected log levels control which messages are persisted. The logger ' s threshold behavior also means that a DEBUG root threshold includes INFO-level events because INFO has a higher severity.

The “logging global preference” described in options B and C is not the relevant mechanism for solving this custom logger configuration issue. Either of those options would also omit one of the two necessary controls described in option A.

Thus the developer should configure both the permitted log-level threshold and the INFO file output, then execute the code again and inspect the generated custom log through Log Center or WebDAV.

Study Guide reference:Application Development — custom logging, log levels, Business Manager log configuration, and WebDAV diagnostics.

===============