A Visualforce controller has a requirement to be written with "Without Sharing" at the top level; however, certain methods within the page still need to enforce the user permissions for creating records and accessing certain fields. Which two methods below would be used to enforce this requirements?
Choose 2 answers.

Universal Containers has a custom object to maintain Job information with a private sharing model. The Delivery group is distributed through the Role Hierarchy based on geography. As the Delivery group often collaborates on Jobs, all users in the Delivery profile required View access to all Job records. In special case, the Delivery user who owns a job must be able to grant a Product Development user access to a Job record.
Which two platform features can be used to support these requirements?
Choose 2 answers

Universal Containers has a customer that meets criteria for two Enterprise territory Management territories (Portugal and Southern Europe).
What is necessary to assign opportunities to a territory for this account?

Universal Containers (UC) delivers training in 500 different regions. The UC Operations Users team manage course setup, scheduling, and trainer setup. The Operations Users team members work at a regional level and report to an Operations manager. The Operations manager requested access to edit ALL scheduled courses owned by the Operation Users team.
How can this be achieved?

Cloud Kicks recently decided to change its role hierarchy.
After this change was deployed, multiple staff members at Cloud Kicks reported to management that they can now view reports that they do not own and should not have access to.
What should the Architect do to assess the cause of the issue?