CRT-101 · Question #59
An administrator at Universal Containers is reviewing current security settings in the company's Salesforce org. What Should the administrator do to prevent unauthorized access to Salesforce?
The correct answer is B. Enable multi factor authentication. Multi-Factor Authentication (MFA) directly prevents unauthorized access by requiring users to verify their identity with a second factor (such as an authenticator app) in addition to their password. Even if a password is compromised, an attacker still cannot log in without the…
Question
An administrator at Universal Containers is reviewing current security settings in the company's Salesforce org. What Should the administrator do to prevent unauthorized access to Salesforce?
Options
- ADisable TLS requirements for sessions.
- BEnable multi factor authentication
- CCustomize organization wide default
- DEnable caching and autocomplete on login page
How the community answered
(35 responses)- A3% (1)
- B89% (31)
- C6% (2)
- D3% (1)
Explanation
Multi-Factor Authentication (MFA) directly prevents unauthorized access by requiring users to verify their identity with a second factor (such as an authenticator app) in addition to their password. Even if a password is compromised, an attacker still cannot log in without the second factor. Disabling TLS (A) weakens encryption and makes sessions more vulnerable. Org-Wide Defaults (C) control which records users can see-they govern data access, not authentication. Enabling caching and autocomplete on the login page (D) stores credentials in the browser, which actually increases the risk of unauthorized access on shared or stolen devices.
Topics
Community Discussion
No community discussion yet for this question.