Question

Difficulty: EasyLogin Security, Login IP Ranges, and Login Hours

A System Administrator has configured specific Login IP Ranges on the Sales User profile in Salesforce. A user assigned to this profile attempts to log in from an IP address that falls outside of the designated ranges. What will occur upon this login attempt?

  1. The login attempt is completely restricted, and the user is denied access.Answer
  2. B
    The user is prompted to enter an activation code sent via email or SMS before gaining access.
  3. C
    The user is granted access, but their session rights are restricted to read-only mode.
  4. D
    The system forces an immediate password reset before allowing access from the new location.

Answer

The login attempt is completely restricted, and the user is denied access.
When Login IP Ranges are defined on a user's Profile, Salesforce enforces a strict restriction. If a user attempts to log in from an IP address not explicitly listed within those profile ranges, the login is denied completely.

Step-by-Step Solution

1
Identify the level at which the IP ranges are configured.
The IP ranges are defined at the Profile level (Login IP Ranges).
Profile-level IP settings behave differently from Organization-wide Network Access settings.
2
Evaluate the access behavior for Profile-level Login IP Ranges.
Attempts outside the specified range are completely denied.
Profile-level login restrictions enforce hard security boundaries without identity verification prompts.

Key Concept

Profile Login IP Ranges vs. Org-Wide Network Access
Rate this question