Universal Containers uses the Case object to track service tickets. They have implemented Case teams to allow multiple support representatives to manage the Cases. Which two "Filter by owner" options would the user see while creating a list view on the Case object? Choose 2 answers

Universal Container has developed a custom Visualforce page that will accept user input and must prefer returning the results to the users.
Which two techniques should be used to ensure the users cannot perform a SOQL injection attack?

What is the best practice for testing sharing and visibility changes?

Universal Containers has a requirement to share Accounts automatically to the users at a field office. They currently have the following setup in their environment:
* Accounts are set to Private in the Org-Wide Default.
* The field office is specified by a lookup in the Account object.
* There are 400 field offices.
* The users in each field office are managed using public groups.
Based upon a lookup relationship field on the Account, how should the Architect meet this requirement?

How would you make sure Visualforce page is security proof? Choose 3 answers