An administrator at Universal Containers has been asked to prevent users from accessing Salesforce from outside of their network. What are two considerations for this configuration? Choose 2 answers

Question

Options

• AIP address restrictions are set on the profile or globally for the org.
• BUsers can change their password to avoid login IP restrictions.
• CEnforce Login IP Ranges on Every Request must be selected to enforce IP restrictions.
• DSingle sign-on will allow users to log in from anywhere.

• A
  86% (25)
• B
  10% (3)
• D
  3% (1)

Explanation

A: IP address restrictions in Salesforce can be configured at two levels - on individual profiles (Login IP Ranges section) or as a global org-wide trusted IP range. Both approaches are valid and can be used together. C: The 'Enforce Login IP Ranges on Every Request' setting (found in Session Settings) is critical - without it, IP restrictions only apply at login time. Once a session token is established, a user could move outside the allowed IP range and continue working. Enabling this setting enforces IP checks on every API and UI request. B is false: changing a password does not bypass login IP restrictions. D is false: Single Sign-On does not inherently allow access from any IP - SSO sessions are still subject to IP enforcement if configured.

No community discussion yet for this question.