Exam CRT-450 topic 1 question 58 discussion

With sharing keywords are used to configure sharing settings, not field settings. So in my opinion it should be A.

Sharing has nothing to do with field level security so D is not correct. Based on developer.salesforce.com/wiki/enforcing_crud_and_fls When rendering VisualForce pages, the platform will automatically enforce CRUD and FLS when the developer references SObjects and SObject fields directly in the VisualForce page. Therefore all that's needed is to create one visualforce component and it will automatically handle the field visibility

D is the correct option::Custom controllers and controller extension classes execute in system mode, so they ignore user permissions and field-level security. However, you can choose whether they respect a user's organization-wide defaults, role hierarchy, and sharing rules by using the with sharing keywords in the class definition. For information, see “Using the with sharing, without sharing, and inherited sharing Keywords” in the Apex Developer Guide.

Sharing has nothing to do with field level security so D is not correct. Based on developer.salesforce.com/wiki/enforcing_crud_and_fls When rendering VisualForce pages, the platform will automatically enforce CRUD and FLS when the developer references SObjects and SObject fields directly in the VisualForce page. Therefore all that's needed is to create one visualforce component and it will automatically handle the field visibility

A is correct. Custom Controller does not respect object permission or record access. https://developer.salesforce.com/docs/atlas.en-us.pages.meta/pages/pages_controller_def.htm

VF page handle field visility by default