nerdexam
Salesforce

CRT-101 · Question #59

An administrator at Universal Containers is reviewing current security settings in the company's Salesforce org. What Should the administrator do to prevent unauthorized access to Salesforce?

The correct answer is B. Enable multi factor authentication. Multi-Factor Authentication (MFA) directly prevents unauthorized access by requiring users to verify their identity with a second factor (such as an authenticator app) in addition to their password. Even if a password is compromised, an attacker still cannot log in without the…

Configuration and Setup

Question

An administrator at Universal Containers is reviewing current security settings in the company's Salesforce org. What Should the administrator do to prevent unauthorized access to Salesforce?

Options

  • ADisable TLS requirements for sessions.
  • BEnable multi factor authentication
  • CCustomize organization wide default
  • DEnable caching and autocomplete on login page

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    89% (31)
  • C
    6% (2)
  • D
    3% (1)

Explanation

Multi-Factor Authentication (MFA) directly prevents unauthorized access by requiring users to verify their identity with a second factor (such as an authenticator app) in addition to their password. Even if a password is compromised, an attacker still cannot log in without the second factor. Disabling TLS (A) weakens encryption and makes sessions more vulnerable. Org-Wide Defaults (C) control which records users can see-they govern data access, not authentication. Enabling caching and autocomplete on the login page (D) stores credentials in the browser, which actually increases the risk of unauthorized access on shared or stolen devices.

Topics

#Security Best Practices#Multi-Factor Authentication#User Access Security

Community Discussion

No community discussion yet for this question.

Full CRT-101 Practice