A Salesforce Administrator at Quantum Energy must configure security controls for five HR Compliance Officers who currently share the standard Operations profile with thirty other employees. The business requirements state:
1. The five HR Compliance Officers require Read access to the sensitive `National_ID__c` field on the Contact object, but all other Operations users must be prevented from accessing or viewing this field across all interfaces, reports, and API calls.
2. The five HR Compliance Officers must be strictly blocked from logging into Salesforce when working outside the corporate network IP range of , while other Operations users may continue logging in from any location.
Which configuration strategy should the administrator implement to satisfy these security requirements with minimal impact on other users?
- Clone the Operations profile to create a custom HR Compliance profile, configure the Login IP Ranges on the new profile, and assign a Permission Set with Read access for National_ID__c via Field-Level Security to the five officers.Answer
- BAdd the corporate network range to Network Access under Org-Wide Security Controls in Setup, and assign a Permission Set granting Field-Level Security Read access on National_ID__c to the five officers.
- CSet Component Visibility on the Contact Lightning Record Page using Dynamic Forms to render the National_ID__c field only for HR Compliance Officers, and add the Login IP Ranges to their existing Operations profile.
- DKeep all users on the existing Operations profile and assign a new Permission Set to the five HR Compliance Officers that configures both the Login IP Ranges restriction and Field-Level Security Read access.