An authentication app is a mobile app that generates verification codes for logging in to Salesforce or other services that require multi-factor authentication (MFA). A username and password are also required for logging in to Salesforce, but they are not sufficient for MFA. Reference: https://help.salesforce.com/s/articleView?id=sf.identity_auth_apps.htm&type=5

The best way to keep secure fields protected in email templates is to remove them from the email altogether. Classic encrypted fields are not supported in email templates, and implementing GDPR or setting up an approval process for email alerts do not prevent unauthorized users from viewing sensitive data in emails. Reference: https://help.salesforce.com/articleView?id=security_pe_classic_encryption_considerations.htm&type=5

Two practices that the administrator should adhere to in order to ensure a successful deployment to production are:

Add permissions and access settings to outbound change sets in addition to the dependent component list. This can help avoid deployment errors or access issues caused by missing permissions or settings for the components in the change set. For example, if the change set includes a new custom object, the administrator should also include the object permissions, field-level security, page layouts, and record types for that object.

Run deployment validations on the change set in the sandbox prior to uploading to production. This can help test the change set for any errors or conflicts before deploying it to production. Deployment validations simulate the deployment without actually making any changes and report any issues or warnings.

The other two options are incorrect because:

Cloning a change set does not add forgotten dependent components to an uploaded change set. It only creates a copy of the existing change set that can be modified before uploading.

When deploying a new record type, it is not necessary to have it as the only component in the change set. It can be deployed along with other components as long as they are compatible and have the required dependencies.

A roll-up summary field is used to display a value in a master record based on the values of a set of related detail records. In this case, the administrator can create a roll-up summary field on the Properties object that counts the number of Open House records in a Pending status. Reference: https://help.salesforce.com/s/articleView?id=sf.fields_about_roll_up_summary_fields.htm&type=5

A permission set is a collection of settings and permissions that give users access to various tools and functions. The View All Data permission allows users to view all data, regardless of sharing settings. By creating a permission set with this permission and assigning it to the subset of users, the administrator can meet the requirement without changing their profiles or roles. Reference: https://help.salesforce.com/s/articleView?id=sf.perm_sets_overview.htm&type=5 https://help.salesforce.com/s/articleView?id=sf.admin_general_permissions.htm&type=5

Salesforce's Data Export Service is a tool that allows you to export your organization's data to a set of comma-separated values (CSV) files and store them in a backup location of your choice. You can schedule this service to run weekly or monthly and receive an email notification when your files are ready to download. This is one way to back up your data daily without using any external tools or services. Reference: https://help.salesforce.com/s/articleView?id=sf.data_export.htm&type=5