The best Salesforce Shield capabilities for the customer are to restrict access to SF from users outside specific geography, implement transaction security policies to prevent export of SF data, and encrypt sensitive customer information maintained in SF. Salesforce Shield is a set of security features that help protect enterprise data on the Salesforce platform. It includes three components: Event Monitoring, Platform Encryption, and Field Audit Trail. Restricting access to SF from users outside specific geography can be done using network-based security features, such as IP whitelisting or VPN. Transaction security policies can be used to define actions or notifications based on user behavior patterns, such as exporting data or logging in from an unknown device. Platform Encryption can be used to encrypt data at rest using a tenant secret key that is controlled by the customer.

Enabling Account de-duplication by creating matching rules in Salesforce, which will mass merge duplicate Accounts, is what UC should do to ensure proper data quality for their Account records. Matching rules allow UC to define how Salesforce identifies duplicate Accounts based on various criteria, such as name, address, phone number, etc. Mass merge allows UC to merge up to 200 duplicate Accounts at a time, based on the matching rules. This simplifies and automates the process of de-duplicating Accounts and improves data quality. The other options are either more time-consuming, costly, or error-prone for ensuring proper data quality.

 Creating a duplicate rule for account, lead, and contact, using standard matching rules for these objects, and setting the action to report and alert for both creates and edits can help UC fix the issue immediately by prompting users about a record that possibly exists in Salesforce.  This can also generate a report regarding duplicate records that can be used for further analysis and resolution

Contacting Salesforce to enable Defer Sharing Rules is the feature that would ensure that performance, when moving Sales Reps between regions, remains adequate while meeting existing requirements. Defer Sharing Rules allows you to defer sharing rule recalculation when you make changes to public groups or roles that are used in sharing rules.  This can improve performance and avoid locking issues when you move users between groups or roles 2 . Implementing data archiving for old Shipment records will not help with the performance issue related to sharing rules. Contacting Salesforce to create Skinny tables on Shipment will not help with the performance issue related to sharing rules. Configuring shipment OWD to Public Read/Write will not meet the existing requirements of having a Private sharing model.

Creating an external object Invoice_x with a Lookup relationship with Opportunity is the best option for modeling invoices, considering performance and data storage space. An external object allows the data to be stored in the ERP system and accessed via OData in Salesforce. This reduces the data storage consumption in Salesforce and improves the performance of queries and reports. A Lookup relationship allows the sales reps to view the invoice status and amount from the opportunity page.  The other options would either consume more data storage space, require additional customization, or not provide real-time data access

Salesforce Connect is a feature that allows users to access data from external sources and multiple Salesforce orgs, using either clicks or code. Salesforce Connect can provide read-only access to customer records across all NTO orgs, without replicating or storing the data in Salesforce.

 Using validation rules to mitigate this problem is the best option. Validation rules can help you prevent invalid data from being entered in your web order form. You can use validation rules to check for data quality, format, range, or consistency. For example, you can use validation rules to ensure that the order quantity is positive, the product code is valid, or the shipping address is complete.

According to Trailhead 2 , Customer 360 Data Manager is a feature that allows administrators to connect, reconcile, and share customer data across Salesforce orgs and external systems. Customer 360 Data Manager can sync product and pricing information from product master database to Salesforce using predefined mappings and rules, ensuring data quality and consistency. Option D is the correct answer because it suggests using Customer 360 Data Manager to sync product and pricing information from product master database to Salesforce. Option A is incorrect because building a custom integration for two-way sync of product and pricing information between product master and Salesforce can introduce data conflicts and duplication issues, as both systems can update the same data independently. Option B is incorrect because building a custom integration for one-way sync of product and pricing information from product master to Salesforce can be costly and time-consuming, as it requires custom development and maintenance. Option C is incorrect because implementing a manual process to update the products from an extract from the products master on a weekly basis can result in data latency and errors, as the products information may change more frequently than once a week.

Before replicating the data from Heroku Postgres to Salesforce, the data architect should consider the following factors:

Whether the data is a driver of key processes implemented within Salesforce. For example, if the data is used for workflows, triggers, or validation rules, it should be replicated to Salesforce.

Whether there is a tight relationship between order data and an enterprise resource planning (ERP) application. For example, if the order data needs to be synchronized with the ERP system, it should be replicated to Salesforce.

The selection of the tool required to replicate the data.  For example, Heroku Connect can be used to bi-directionally sync data between Heroku Postgres and Salesforce

Archiving and purging old data from Salesforce on a monthly basis is a good strategy to improve the user experience for the Sales Reps, as it will reduce the clutter and improve the search performance. Creating a permission set or setting data access to private are not effective ways to hide old data from Sales Reps, as they will still consume data storage and affect search results. Using Batch Apex to archive old data on a rolling nightly basis is also not a good option, as it will consume API requests and processing time, and may not comply with the data retention policy.