Restricting Access to Employee Social Security Field

Correct Answer: D

Field level security can be used to restrict access to a field.

It is usually used when you don't want certain fields to be accessible to all users or you want to provide access to certain group of users.

Option A is incorrect because permission set doesn't restrict field access.

Option B is incorrect because manual sharing is sharing a record with one user.

Option C is incorrect because role hierarchy extends access for a manager, for example to access his team records.

Reference:

The correct answer is D. Use field level security.

Field-level security allows administrators to control the visibility of fields on objects to restrict access to sensitive data, such as Social Security numbers. By using field-level security, an administrator can limit access to the employee Social Security field to the HR department only.

To implement field-level security, the Salesforce Admin would need to follow these steps:

1. Navigate to the object that contains the employee social security field.
2. Click on the 'Fields' section of the object.
3. Click on the employee social security field.
4. Click on the 'Set Field-Level Security' button.
5. In the 'Field Accessibility' section, select the profiles or permission sets that should have access to the field. In this case, the HR department profile or permission set should be granted access.
6. Save the changes.

Once the changes have been saved, only the profiles or permission sets selected will be able to view or edit the employee social security field. Other users or profiles will not be able to access this field.

In conclusion, the Salesforce Admin would use field-level security to restrict access to the employee social security field in Salesforce, ensuring that only the HR department has access to this sensitive data.