nerdexam
Salesforce

ADM-201 · Question #69

A user at Ursa Major Solar attempts to log in to Salesforce from an IP address that is outside the login IP range on the user's profile but within the organization-wide trusted IP range. What occurs…

The correct answer is D. The user will be unable to log in at all. If a user attempts to log in from an IP address outside the range specified in their profile's login IP restrictions, access will be denied. Profile-level IP restrictions override organization-wide trusted IP ranges.

Submitted by tyler.j· Apr 18, 2026Configuration and Setup

Question

A user at Ursa Major Solar attempts to log in to Salesforce from an IP address that is outside the login IP range on the user's profile but within the organization-wide trusted IP range. What occurs as a result of this scenario?

Options

  • AThe user will be able to log in without activating the computer.
  • BThe user will be to log in after answering one security question.
  • CThe user will be able to log in after the computer is activated.
  • DThe user will be unable to log in at all.

How the community answered

(42 responses)
  • B
    2% (1)
  • C
    2% (1)
  • D
    95% (40)

Why each option

If a user attempts to log in from an IP address outside the range specified in their profile's login IP restrictions, access will be denied. Profile-level IP restrictions override organization-wide trusted IP ranges.

AThe user will be able to log in without activating the computer.

The user will be unable to log in because the profile's IP restrictions are violated, regardless of computer activation status.

BThe user will be to log in after answering one security question.

Answering security questions or activating a computer is typically required when logging in from an unknown device *outside the organization's trusted IP range* but *within* the profile's allowed IP range, which is not the case here.

CThe user will be able to log in after the computer is activated.

Computer activation is for unknown devices logging in from IPs outside the trusted range but within the profile's allowed range; since the login IP is outside the profile's allowed range, activation will not grant access.

DThe user will be unable to log in at all.Correct

Login IP ranges defined at the user's profile level strictly control the IP addresses from which a user can log in; if an attempt originates from an IP outside this profile-specific range, access is denied. Profile IP restrictions take precedence over the organization-wide trusted IP range, meaning the user cannot log in at all from an unauthorized IP according to their profile.

Concept tested: Profile Login IP Restrictions vs. Org-Wide Trusted IP

Source: https://help.salesforce.com/s/articleView?id=sf.users_profile_login_ip_ranges.htm&type=5

Topics

#Security Settings#Login IP Ranges#Trusted IP Ranges#User Access

Community Discussion

No community discussion yet for this question.

Full ADM-201 Practice