The sales managers at the Universal Containers (UC) requested their teams to define each user's role on their accounts in order to provide an easy way to establish accountability and collaboration. Sales managers also requested that sales associates should only get the following permissions:
* Read access to the accounts.
* Read access to cases related to the accounts
* No access to deals related to the accounts
The sales associates may be granted access to opportunities when needed.
Assuming the overall sharing model of the organization is private and no sharing rules are configured on the account object. How can an Architect achieve these requirements?

The system administrator at UC has created two list views called List1 and List2. One group of users should only see List1 and the second group should only see list2. Two public groups were created to restrict visibility to the respective list views. However, users in both groups are able to see both list views. What system permission in their profile enabled the users to see all list views?

Which two access grants are stored in the Group Maintenance tables?
Choose 2 answers

Which two settings are available in profiles, but not permission sets?
Choose 2 answers.

How should the Architect ensure that object-level security is enforced within a custom Visualforce application that uses a standard Apex controller on the Lead object?