Salesforce Comm-Dev-101 問題集 : Salesforce Certified B2C Commerce Cloud Developer

In Log Center, a developer notes a number of Cross Site Request Forgery (CSRF) log entries.
After adding the token in the ISML template, which action might solve this problem?

• A. Extend the CSRF token validity to avoid timeouts.
• B. Delete the existing CSRF allow list in Business Manager.
• C. Add csrfProtection middleware steps in the controller.

A client has a requirement to allow users on the Storefront to filter by a newly created attribute.
After creating the search refinement, what else is necessary to achieve this?

• A. Change the productsearchrefinebar.isml template.
• B. Set the attribute as Searchable.
• C. Ensure the attribute has data and is indexed.

A developer has these requirements for out-of-stock products:
* Save the SKUs of the out-of-stock products that the customer is interested in.
* Save the customer email regardless if the customer is a guest or registered.
* Email the customer when the product is back-in-stock.
Which step should the developer perform as part of the solution to achieve the requirements?

• A. Create a new set-of-string type custom attribute to the system object type Profile to save all the SKUs and use the existing email field for the email.
• B. Create a new set-of-string type custom attribute to the system object type Product to save all the customer email addresses for back-in-stock notification.
• C. Create a new custom object type that has a set-of-string type custom attribute for the SKUs and a string for the email field.

The developer created a new Storefront category in storefront-catalog-m-en, but when viewing the Storefront site, the category is not visible.
Why might the categories not be visible?

• A. The Storefront catalog is offline.
• B. The category does not contain available products.
• C. The categories are not sorted.

A developer is writing a server side script that needs to maintain state across calls. The persistent information needed includes these items:
* The current customer
* Whether or not the customer is authenticated
* The privacy attributes (such as tracking consent or cookie policy)
Which technique should the developer use to maintain state in an efficient and scalable manner that follows best practice?

• A. Use a client-side cookie to store the information for the session duration.
• B. Use an SFRA controller. Because it runs server-side, the state is automatically maintained.
• C. Use the Session class, and its additional class references and attributes, in the B2C Commerce API.