The architect at Universal Containers is trying to ensure that security vulnerabilities are not present within the Salesforce organization.
What two tests should the architect verify? (Choose two.)

Universal Containers (UC) has a requirement to expose a web service to their business partners. The web service will be used to allow each business partner to query UC's Salesforce instance to retrieve the status of orders. The business partner should only be allowed access to orders for which the business partner is the fulfillment vendor. The Architect does not want the business partners to utilize the standard APIs and would prefer a custom API be developed. Which three design elements should the Architect consider in order to ensure the data security of the solution?
Choose 3 answers

Which three areas should the Architect review in order to increase performance of "Record Access" and "Sharing" calculations?
Choose 3 answers.

Universal Container maintains job info in a Custom object that contains sensitive information. The user who owns the record and all users in the delivery profile are the only users who should be able to view and edit job records. Which three platform sharing tools are required to support the above requirements?

The sales managers at the Universal Containers (UC) requested their teams to define each user's role on their accounts in order to provide an easy way to establish accountability and collaboration. Sales managers also requested that sales associates should only get the following permissions:
* Read access to the accounts.
* Read access to cases related to the accounts
* No access to deals related to the accounts
The sales associates may be granted access to opportunities when needed.
Assuming the overall sharing model of the organization is private and no sharing rules are configured on the account object. How can an Architect achieve these requirements?