I85PREP
⌘ K
Salesforce Marketing Cloud Administrator study materials
Salesforce Marketing Cloud Administrator study resources

Salesforce Marketing Cloud Administrator practice questions

One question at a time. Build your Salesforce Marketing Cloud Administrator understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Setup

In a Marketing Cloud Enterprise account, what is the top-level Business Unit?

  1. The parent Business Unit that holds enterprise settings and child BUs Correct answer.
  2. A child Business Unit with limited access to the parent
  3. A single shared Business Unit where every user has full permissions
  4. A separate instance with its own login URL and subscriber lists

Explanation

An Enterprise account has a top-level (parent) Business Unit that carries enterprise-wide configuration, with child Business Units beneath it for brands, regions, or teams. Users only work in the Business Units their assignments and role allow.

Question 2Setup

Which object defines what actions a Marketing Cloud user is permitted to perform?

  1. Business Unit
  2. Role Correct answer.
  3. Installed Package
  4. Sender Profile

Explanation

Roles are the permission sets in Setup. A user is created within a Business Unit and assigned a role that determines which features and actions are available.

Question 3Setup

What does a Sender Authentication Package provision for an account?

  1. Encryption of email content stored in Content Builder
  2. Automatic warm-up of a dedicated IP address
  3. A branded sending domain authenticated with SPF and DKIM Correct answer.
  4. Mandatory two-factor authentication for senders

Explanation

A Sender Authentication Package provisions a branded sending domain with delegated authentication records (SPF and DKIM) and includes reply mail management for the domain. This lets receiving systems verify that the mail genuinely comes from the brand.

Question 4Setup

An administrator must prevent Marketing Cloud logins from outside the corporate network. Which Setup feature enforces this?

  1. Single Sign-On
  2. Two-Factor Authentication
  3. Login IP Allowlist Correct answer.
  4. Password Policy

Explanation

The Login IP Allowlist restricts authentication to specified IP ranges, so a valid password entered from outside those ranges is rejected. It is configured at the account level by an administrator.

Question 5Setup

Which Setup feature records logins, permission changes, and other administrative actions for later review?

  1. Tracking Extract
  2. Audit Trail Correct answer.
  3. System Status
  4. Data Retention Policy

Explanation

The Audit Trail captures activity such as user logins and changes to Setup objects, giving administrators a record for troubleshooting and compliance review.

Question 6Setup

SAML single sign-on is enabled for a user. What happens when that user opens the Marketing Cloud login page?

  1. The user is logged in with no authentication because the identity provider is trusted
  2. The user is redirected to the identity provider and returned after authenticating Correct answer.
  3. The user types a Marketing Cloud password and the identity provider is notified afterward
  4. The user requests a one-time passcode from a Setup administrator

Explanation

With SAML SSO, Marketing Cloud delegates authentication to the identity provider and trusts the assertion returned after a successful sign-in. The user authenticates with the identity provider, not with a Marketing Cloud password.

Question 7Setup

A vendor's backend service must call Marketing Cloud APIs on a schedule with no user present. Which installed package component type should be used?

  1. Web App
  2. Server-to-Server Correct answer.
  3. Journey Builder Component
  4. Public App

Explanation

A Server-to-Server component uses a client ID and client secret to obtain an access token without an interactive login, which suits unattended background integrations.

Question 8Setup

Which statement about synchronized data sources is accurate?

  1. They mirror a CRM object and refresh automatically or on demand Correct answer.
  2. They are available in Email Studio but not in Contact Builder
  3. They can be written to directly by a SQL Query Activity in Automation Studio
  4. They can be created only by a Salesforce system administrator inside CRM

Explanation

A synchronized data source replicates a Salesforce CRM object into Marketing Cloud and refreshes according to its sync schedule, or on demand. The resulting data extension is read-only, so query results must be written elsewhere.

Question 9Setup

A child Business Unit needs to use a data extension that lives in the parent Business Unit. What should the administrator do?

  1. Share the data extension from the parent to the child BU Correct answer.
  2. Copy the data extension with an Import Activity every day
  3. Re-create the child Business Unit under the shared folder
  4. Nothing, because every BU can see all data extensions

Explanation

Enterprise accounts can share a data extension from a parent Business Unit so child Business Units reference the same data without duplicating it. Sharing preserves a single source of truth.

Question 10Setup

Which requirement can an administrator enforce on the Security Settings page?

  1. The number of emails a single user may send per day
  2. The From name used in all email sends
  3. The default send classification for the account
  4. Minimum password length and password expiration Correct answer.

Explanation

The Security Settings page controls password rules such as minimum length, complexity, and expiration for users who authenticate directly. These rules apply account-wide.

Question 11Setup

Which statement about Marketing Cloud user accounts is correct?

  1. A user can hold several different Roles inside the same Business Unit
  2. Users created at enterprise level automatically access every Business Unit
  3. A user's Role is assigned in Email Studio rather than in Setup
  4. Each user is assigned to a Business Unit and to one Role Correct answer.

Explanation

A user is created within a Business Unit and receives a single role that defines permissions for that Business Unit. Access to additional Business Units requires a separate user record for each one.

Question 12Setup

Which object supplies the From name and From address used when a message is sent?

  1. Delivery Profile
  2. Business Unit
  3. Send Classification
  4. Sender Profile Correct answer.

Explanation

A Sender Profile holds the From name, From address, and reply handling that a send uses. Different sends can reference different Sender Profiles to present different brands.

Question 13Setup

Which statement describes a Data Retention Policy in Marketing Cloud?

  1. It applies only to MobileConnect message logs and opt-in data
  2. It deletes subscribers who have not opened an email in twelve months
  3. It sets how long tracking data is kept and can differ by Business Unit Correct answer.
  4. It must be identical for every Business Unit and cannot be changed

Explanation

Data retention policies define how long tracking and related data is stored, and administrators can define them at the enterprise level and per Business Unit. This supports compliance with internal and regulatory data limits.

Question 14Setup

Which location does Marketing Cloud provide for automated file imports and exports?

  1. A public Amazon S3 bucket created automatically for each account
  2. The Enhanced FTP account provided with the Marketing Cloud account Correct answer.
  3. The Content Builder asset library for the Business Unit
  4. The administrator's corporate email inbox

Explanation

Marketing Cloud provides an Enhanced FTP account that serves as the file drop and pickup location for Import and Extract activities in Automation Studio. Files must be placed there (or a supported external location) to be processed.

Question 15Setup

In an installed package, what does a component's scope control?

  1. Which Business Unit the package is installed into
  2. How many API calls per hour the integration may make
  3. Which IP addresses may call the Marketing Cloud APIs
  4. Which API operations the integration may perform Correct answer.

Explanation

Scopes on a package component authorize specific API operations, following the principle of least privilege. An integration can only call the endpoints covered by the scopes granted to it.

Question 16Setup

Which situation describes how two-factor authentication is used in Marketing Cloud?

  1. It replaces the password for every user in the enterprise
  2. It can be turned on only after single sign-on is permanently disabled
  3. Users who sign in with a password can be required to enter a code Correct answer.
  4. It applies only to Server-to-Server API integrations

Explanation

For users who authenticate directly with a Marketing Cloud password, the account can require a verification code in addition to the password. Users who authenticate through SSO instead receive multi-factor protection from the identity provider.

Question 17Setup

Which feature processes replies to a send and can forward them, return an auto-response, or handle unsubscribe requests?

  1. Send Log
  2. Send Classification
  3. Delivery Profile
  4. Reply Mail Management Correct answer.

Explanation

Reply Mail Management handles incoming replies to the reply address, applying rules such as forwarding, auto-response, and unsubscribe processing. It is provisioned with a Sender Authentication Package domain.

Question 18Setup

What must be in place before MobileConnect messages can be delivered to subscribers in a given country?

  1. The subscriber has previously opened an email message
  2. A journey is activated in Journey Builder for that country
  3. A content block is published to the shared content library
  4. A short code or long code is provisioned for that country Correct answer.

Explanation

MobileConnect requires a provisioned code, either short or long, for each country where messages are sent. Without a code for that market, no outbound mobile message can be delivered there.

Question 19Setup

What is required on the Marketing Cloud side to enable Marketing Cloud Connect with a Salesforce org?

  1. A custom preference center published from CloudPages
  2. A dedicated IP address and a Sender Authentication Package configured for the BU
  3. A synchronized data source that pulls CRM objects on a schedule
  4. Installing the Marketing Cloud Connect package with a permitted user Correct answer.

Explanation

Marketing Cloud Connect is deployed as an installed package containing the API integration, and the connecting user must hold the permissions the integration needs. Once connected, CRM objects can be synchronized into Marketing Cloud.

Question 20Setup

Which feature requires a designated approver to review content before it can be sent?

  1. Send Log
  2. Delivery Profile
  3. Send Classification
  4. Approval Workflow Correct answer.

Explanation

Approval Workflows route content to a designated approver, and the message cannot go out until that approver accepts it. This enforces review before sends.

Question 21Setup

Which value uniquely and permanently identifies a subscriber for the life of an account?

  1. Subscriber Key Correct answer.
  2. Batch ID
  3. Email Address
  4. Contact ID

Explanation

The Subscriber Key is the permanent identifier for a subscriber and stays the same even if the email address changes. Email address by itself can change or be reused by another person.

Question 22Setup

Where can an administrator check whether Marketing Cloud is experiencing a platform-wide incident?

  1. The Audit Trail
  2. The Data Retention Policy
  3. The System Status page Correct answer.
  4. The Installed Packages page

Explanation

The System Status page reports active platform incidents, degradations, and scheduled maintenance. Administrators check it to distinguish a platform issue from an account-specific problem.

Question 23Setup

Which item must be created before send logging can capture details of outbound email?

  1. A filtered data extension built on the All Subscribers list
  2. A synchronized data source mapped to the CRM EmailMessage object
  3. A standard data extension named SendLog with no required fields
  4. A data extension built from the Send Log template Correct answer.

Explanation

Send logging requires a data extension created from the Send Log template so it contains the field names the platform writes to at send time. Once created and selected, send-time attributes are populated automatically.

Question 24Setup

A child Business Unit needs to use images stored in the parent Business Unit's Content Builder. What enables this?

  1. Publish the image to the Shared Items tab of Email Studio
  2. Share the Content Builder folder from the parent Business Unit Correct answer.
  3. Move the image into the Portfolio for the child Business Unit
  4. Copy the image into every Business Unit after each update

Explanation

Enterprise accounts can share Content Builder folders from a parent Business Unit so child Business Units reference the same assets. Sharing avoids duplicate copies that drift out of date.

Question 25Setup

What does the Business Unit menu in the top navigation let a user do?

  1. Send an email on behalf of a different Marketing Cloud account
  2. Switch between the Business Units the user can access Correct answer.
  3. Reset another user's password without an administrator
  4. Change the account-level security settings for all users

Explanation

The Business Unit menu lists only the Business Units the user has been granted access to and switches the working context between them. Each Business Unit has its own users, data, and assets.

Question 26Setup

An administrator creates a new role and assigns it to a user. What does that role determine for the user?

  1. The dedicated IP address used for the user's sends
  2. Permissions and the Business Units the user can access Correct answer.
  3. The subscriber key model applied to the user's imports
  4. The sender profile used for the user's sends

Explanation

A role bundles a set of permissions together with the Business Units where those permissions apply, and a user can hold several roles at once. Sender profiles, IP addresses, and the subscriber key model are configured at the account or send level, not per user.

Question 27Setup

Which two items does a send classification combine into a single selectable option?

  1. A sender profile and a delivery profile Correct answer.
  2. A publication list and a suppression list
  3. A data extension and a seed list
  4. An IP address and a sending domain

Explanation

A send classification pairs a sender profile, which supplies the From name and address, with a delivery profile, which supplies footer, physical address, and unsubscribe handling. Users then pick one classification rather than configuring both objects for every send.

Question 28Setup

An administrator must ensure every commercial email displays the company's postal address and an unsubscribe link. Which setup object supplies these elements?

  1. Delivery profile Correct answer.
  2. Sender profile
  3. Reply Mail Management settings
  4. Send classification

Explanation

The delivery profile defines footer content and unsubscribe behavior for commercial messages, including the required physical mailing address. The send classification then references this delivery profile alongside a sender profile.

Question 29Setup

An administrator authenticates a new sending domain. Which DNS records must be published so receiving servers can validate the mail?

  1. MX and CNAME records only
  2. A records for each dedicated IP address
  3. SPF and DKIM records for the sending domain Correct answer.
  4. PTR and TXT records for the tracking domain

Explanation

SPF records authorize the IP addresses allowed to send for a domain, while DKIM records publish the public key used to verify the cryptographic signature on each message. Together they allow receivers to confirm the domain was not spoofed.

Question 30Setup

A data extension disappeared from a child Business Unit overnight. The administrator needs to identify which user deleted it and when. Which area should be reviewed?

  1. The Audit Trail Correct answer.
  2. The Account Send Summary report
  3. The Send Log data extension
  4. Automation Studio run history

Explanation

The Audit Trail records administrative actions such as create, edit, and delete events along with the acting user and timestamp. Send-time and automation artifacts do not capture object-level administration changes.

Question 31Setup

A new dedicated IP address is provisioned for the account. What must be done before high-volume sends begin from it?

  1. Assign the IP to a publication list
  2. Warm the IP gradually with increasing volume Correct answer.
  3. Convert the IP to a shared pool
  4. Register the IP with every major ISP

Explanation

A new IP has no sending reputation, so volume must be ramped up gradually while engagement stays healthy and complaint rates remain low. Only after warming does the address support full campaign volume without deliverability damage.

Question 32Setup

A subscriber opts out of one publication list in the Subscription Center. What is the effect?

  1. The subscriber stops receiving only that publication's sends Correct answer.
  2. The subscriber is unsubscribed from all commercial sends at the account level
  3. The unsubscribe applies to every Business Unit in the enterprise
  4. The subscriber record is deleted from All Subscribers

Explanation

Publication lists represent content categories that subscribers can opt into or out of individually. Opting out of one publication leaves other sends unaffected unless the subscriber performs a global unsubscribe.

Question 33Setup

An address is present on a suppression list that is applied to a send. What happens to that subscriber during the send?

  1. The subscriber is moved to a different Business Unit
  2. The subscriber receives a plain-text version only
  3. The subscriber is excluded from the send Correct answer.
  4. The subscriber receives the message but is excluded from tracking

Explanation

Suppression lists filter matching addresses out of a send at the moment of delivery, so no message is generated for them. They do not alter subscriber status, tracking, or account structure.

Question 34Setup

What is the purpose of a Business Unit filter?

  1. It limits which subscriber records the Business Unit can see Correct answer.
  2. It restricts which users can log in to the Business Unit
  3. It blocks sends to addresses outside the Business Unit's country
  4. It filters tracking data out of enterprise reports

Explanation

A Business Unit filter applies criteria to the shared enterprise subscriber population so the Business Unit works only with its own records. Authentication and access control are handled separately by roles and security settings.

Question 35Setup

In an enterprise account with several Business Units, where are subscriber records stored?

  1. Only in the parent Business Unit
  2. In the Salesforce CRM org connected to each Business Unit
  3. In a separate database for each Business Unit
  4. At the enterprise level, shared across Business Units Correct answer.

Explanation

All Business Units draw on one enterprise-level subscriber database. Visibility and segmenting are then controlled through Business Unit filters and shared objects rather than physical separation of data.

Question 36Setup

What does a Sender Authentication Package provide when it is configured for a sending domain?

  1. Automatic translation of the email content into each recipient's language
  2. A shared IP pool that is used by every Business Unit in the account
  3. A guarantee that messages always bypass the recipient's spam folder
  4. Authenticated domain with branded links and reply handling Correct answer.

Explanation

A Sender Authentication Package authenticates the sending domain, brands click-tracking links with the customer's own domain, and includes reply mail management for inbound replies. It improves trust signals but cannot guarantee inbox placement.

Question 37Setup

Which Automation Studio activity writes tracking data into a delimited file in the Marketing Cloud Safehouse?

  1. File Transfer activity
  2. Import Activity
  3. SQL Query activity
  4. Data Extract activity Correct answer.

Explanation

A Data Extract activity pulls from tracking and other system sources and produces a file stored in the Safehouse. A File Transfer activity is normally added afterwards to move that file to an external location.

Question 38Setup

Each morning a CSV file is placed on the Marketing Cloud SFTP and must be loaded into a data extension. Which activity should the administrator use?

  1. Data Extract activity
  2. Journey Builder entry event
  3. SQL Query activity
  4. Import Activity Correct answer.

Explanation

An Import Activity maps a file from a Marketing Cloud file location into a data extension and can be scheduled or triggered by file arrival. Query activities operate inside the platform rather than reading external files.

Question 39Setup

Before importing a purchased address list, an administrator wants the platform to flag known invalid or risky addresses. Which feature performs this check?

  1. List Detective Correct answer.
  2. Delivery profile
  3. Publication list
  4. Suppression list

Explanation

List Detective compares addresses against a maintained database of known invalid, role-based, and complaint-prone addresses and can exclude them at import or send. It protects sender reputation by preventing predictable bounces.

Question 40Setup

A data extension will be used as the audience for an email send. Which configuration makes it sendable?

  1. A field named EmailAddress that matches the recipient address
  2. A send relationship to Subscribers on Subscriber Key Correct answer.
  3. A suppression list linked to the data extension
  4. A shared folder location inside Content Builder for all BUs

Explanation

To send to a data extension, the platform needs a send relationship that maps one of its fields to the Subscriber Key of the Subscribers data view. Without that relationship, recipients cannot be resolved and the send fails.

Question 41Setup

An order confirmation must be sent the moment an external system calls Marketing Cloud for one specific recipient. Which setup object handles this?

  1. A triggered send definition Correct answer.
  2. A publication list
  3. A scheduled automation
  4. A user-initiated send definition

Explanation

Triggered send definitions are published in advance and then fired by an API call, delivering to a single subscriber at the time of the request. They are designed for transactional, event-driven messages rather than batch audiences.

Question 42Setup

Contact Builder must combine order data from two related data extensions with subscriber data for segmentation. What should the administrator configure?

  1. An attribute group in Data Designer Correct answer.
  2. A suppression list for each data extension
  3. A sendable data extension for each source
  4. A publication list for each data extension

Explanation

Attribute groups in Data Designer define the relationships that attach data extensions to the contact record, supporting one-to-one and one-to-many cardinality. Those relationships let related order data be used for segmentation and journeys.

Question 43Setup

A scheduled send goes out several hours later than the marketing team expects. Which account setting should the administrator verify first?

  1. The IP warming schedule
  2. The time zone configured for the Business Unit Correct answer.
  3. The delivery profile's send window
  4. The subscriber's preferred send time attribute

Explanation

Scheduled sends and automations evaluate their run times against the account or Business Unit time zone, so an incorrect zone shifts delivery. Confirming the configured zone is the first step before investigating other causes.

Question 44Setup

Which statement about the account's subscriber key model is accurate?

  1. It can be switched from email address to subscriber key at any time
  2. It differs for each Business Unit in an enterprise account
  3. It is defined per send classification
  4. It is chosen at account setup and cannot be changed later Correct answer.

Explanation

The subscriber key setting is fixed when the account is provisioned, because changing it would redefine the identity of every existing contact. Administrators must therefore decide deliberately before importing any data.

Question 45Setup

Marketing wants outbound email links tagged so an external analytics platform can attribute the resulting traffic. Which feature enables this?

  1. Web Analytics Connector Correct answer.
  2. Data Retention Policy
  3. Link branding for the sending domain
  4. Reply Mail Management

Explanation

The Web Analytics Connector appends tracking parameters to links in emails and landing pages so an external analytics tool can attribute visits. It is configured once for the account and then applied to outbound content.

Question 46Setup

A third-party system deposits a file on the SFTP at unpredictable times, and processing must begin as soon as the file lands. Which automation start type should be used?

  1. Triggered send start
  2. File Drop start Correct answer.
  3. Scheduled start
  4. Manual start

Explanation

A File Drop automation begins when a file matching the configured naming pattern arrives in the specified directory, so processing starts as soon as the deposit occurs. Scheduled automations would run at fixed times regardless of file arrival.

Question 47Setup

Two users work in the same shared Content Builder folder, but one can only view assets while the other can edit them. What governs this difference?

  1. The delivery profile assigned to the folder
  2. The users' sender profiles
  3. Folder-level permissions set on the shared folder Correct answer.
  4. The Business Unit's subscriber settings

Explanation

Shared folders carry their own permission entries that grant view or edit rights to individual users or roles. These folder permissions operate in addition to the broader permissions granted by a user's role.

Question 48Setup

How does a shared IP address differ from a dedicated IP address?

  1. Only shared addresses can be authenticated with SPF records
  2. Only dedicated addresses can send transactional messages
  3. Shared addresses require a separate installed package
  4. Reputation is shared with other senders on the pool Correct answer.

Explanation

A shared IP pool is used by multiple customers, so its reputation reflects the combined sending behavior of everyone on it. A dedicated address reflects only the account's own practices, which gives more control but requires warming.

Question 49Setup

Before a major campaign, the team wants to see how the email renders in common clients and devices. Which feature should be used?

  1. Inbox Preview Correct answer.
  2. Send Preview with test data
  3. A seed list test send
  4. Address validation with List Detective

Explanation

Inbox Preview renders the email in a library of client and device screenshots so layout issues can be spotted without sending. Test sends verify delivery and personalization but do not display client-specific rendering.

Question 50Setup

Which feature gives subscribers a hosted page where they can update attributes such as name and postal address?

  1. Subscription Center
  2. Profile Center Correct answer.
  3. A publication list
  4. A sendable data extension

Explanation

The Profile Center is a hosted page where subscribers view and update their own profile attributes. Managing publication opt-ins is handled by the Subscription Center, while a combined page presents both.