When users log in to Salesforce via the user interface, which two settings does the system check for authentication? Choose 2 answers

Question

Options

• AThe user's Two-Factor Authentication for API Logins permission
• BThe role IP address restrictions
• CThe user's profile login hours restrictions
• DThe user's Two-Factor Authentication for User Interface Logins permission

• A
  91% (51)
• C
  5% (3)
• D
  4% (2)

Explanation

The marked answers (A and B) appear to contain errors. When a user logs in via the Salesforce User Interface, the system checks: (C) the user's Profile Login Hours restrictions - if the current time falls outside permitted hours, login is denied; and (D) the 'Two-Factor Authentication for User Interface Logins' permission - if enabled, the user must complete MFA. Option A ('Two-Factor Authentication for API Logins') applies to API-based access such as Data Loader or integrations, not UI logins. Option B references 'role IP address restrictions,' but Salesforce IP restrictions are set on Profiles (Trusted IP Ranges) and org-wide Login IP Ranges - not on Roles. The accurate answer for UI authentication checks is C and D.

No community discussion yet for this question.