ADM-201 Question #69: Real Exam Question with Answer & Explanation

Question

A user at Ursa Major Solar attempts to log in to Salesforce from an IP address that is outside the login IP range on the user's profile but within the organization-wide trusted IP range. What occurs as a result of this scenario?

Options

• AThe user will be able to log in without activating the computer.
• BThe user will be to log in after answering one security question.
• CThe user will be able to log in after the computer is activated.
• DThe user will be unable to log in at all.

Explanation

If a user attempts to log in from an IP address outside the range specified in their profile's login IP restrictions, access will be denied. Profile-level IP restrictions override organization-wide trusted IP ranges.

Common mistakes.

• A. The user will be unable to log in because the profile's IP restrictions are violated, regardless of computer activation status.
• B. Answering security questions or activating a computer is typically required when logging in from an unknown device outside the organization's trusted IP range but within the profile's allowed IP range, which is not the case here.
• C. Computer activation is for unknown devices logging in from IPs outside the trusted range but within the profile's allowed range; since the login IP is outside the profile's allowed range, activation will not grant access.

Concept tested. Profile Login IP Restrictions vs. Org-Wide Trusted IP

Reference. https://help.salesforce.com/s/articleView?id=sf.users_profile_login_ip_ranges.htm&type=5

No community discussion yet for this question.