ADM-201 · Question #185
An administrator at Universal Containers has been asked to prevent users from accessing Salesforce from outside of their network. What are two considerations for this configuration? Choose 2 answers
The correct answer is C. Enforce Login IP Ranges on Every Request must be selected to enforce IP restrictions. D. IP address restrictions are set on the profile or globally for the org. To restrict Salesforce access to specific network IPs, an administrator must set IP ranges at the profile or org level and enable the 'Enforce Login IP Ranges on Every Request' setting for continuous enforcement.
Question
An administrator at Universal Containers has been asked to prevent users from accessing Salesforce from outside of their network. What are two considerations for this configuration? Choose 2 answers
Options
- ASingle sign-on will allow users to Jog In from anywhere.
- BUsers can change their password to avoid login IP restrictions.
- CEnforce Login IP Ranges on Every Request must be selected to enforce IP restrictions.
- DIP address restrictions are set on the profile or globally for the org.
How the community answered
(26 responses)- A12% (3)
- B4% (1)
- C85% (22)
Why each option
To restrict Salesforce access to specific network IPs, an administrator must set IP ranges at the profile or org level and enable the 'Enforce Login IP Ranges on Every Request' setting for continuous enforcement.
Single Sign-On (SSO) simplifies authentication but does not inherently bypass or negate Salesforce's own login IP restrictions, which are enforced by Salesforce itself.
Changing a password has no bearing on Login IP Restrictions; these restrictions are enforced by Salesforce based on the originating IP address of the login attempt, not the password itself.
Selecting 'Enforce Login IP Ranges on Every Request' ensures that users must continually access Salesforce from within the specified IP ranges, preventing access from unauthorized locations even after an initial successful login.
Login IP range restrictions can be configured at the user profile level, limiting access for specific user groups, or globally for the entire organization through network access settings, thereby preventing access from outside defined networks.
Concept tested: Login IP restrictions
Source: https://help.salesforce.com/s/articleView?id=sf.users_profiles_login_ip_ranges.htm&type=5
Topics
Community Discussion
No community discussion yet for this question.