To enforce object-level security and verify if the current user has permission to delete an Account record, the developer should use the isDeletable() method from the DescribeSObjectResult class. The most direct and standard way to access this for the Account object is by using the Schema.sObjectType.Account token. The expression Schema.sObjectType.Account.isDeletable() returns true if the running user has the "Delete" permission on the Account object as defined in their profile or permission sets, and false otherwise. This check should be performed before executing the DML delete operation to prevent exceptions and enforce security.

1. Apex Developer Guide

"Enforcing Object and Field Permissions": This section explicitly demonstrates using Schema.sObjectType tokens to check for user permissions. The guide states

"You can verify a user’s access to sObjects by calling the isAccessible

isCreateable

isDeletable

isUndeletable

or isUpdateable methods on DescribeSObjectResult." An example provided is if (Schema.sObjectType.Contact.isDeletable()) { ... }

which directly supports option B as the standard practice.

2. Apex Developer Guide

"DescribeSObjectResult Class": The documentation for the isDeletable() method specifies that it "Returns true if the current user can delete records of this object

false otherwise." It is a method of the DescribeSObjectResult class

which is obtained via a describe call (e.g.

Account.sObjectType.getDescribe() or the shortcut Schema.sObjectType.Account).

3. Salesforce Platform Developer I Certification Study Guide

"Data Security": This guide emphasizes the importance of using describe methods to check for object and field-level security (FLS) before performing DML operations to build secure applications. The use of Schema.sObjectType.YourObject.isDeletable() is a core concept for this security enforcement.