A Salesforce Administrator is reviewing access restrictions for contractor profiles. Which two statements accurately describe the behavior of Profile-level Login IP Ranges and Login Hours in Salesforce? (Select 2 answers)
- Users attempting to log in outside of their Profile Login IP Ranges are completely denied access to the org.Answer
- Org-wide Network Access IP ranges require identity verification outside the range, whereas Profile Login IP Ranges restrict login entirely.Answer
- CUsers logging in from an IP address outside their Profile Login IP Range are sent an identity verification code to authorize their device.
- DProfile Login Hours restrictions can be bypassed by assigning a permission set that enables flexible access hours.
Answer
Profile-level Login IP Ranges enforce absolute login denial outside the specified range, unlike org-wide Network Access settings which allow login after identity verification. Additionally, Profile settings like Login Hours and Login IP Ranges cannot be relaxed using permission sets.
Profile Login IP Ranges explicitly restrict user access by completely blocking login attempts from unauthorized IP addresses. In contrast, organization-wide Network Access trusted IP ranges allow users logging in from outside the trusted range to verify their identity via SMS or email code. Profile login restrictions provide strict security enforcement.
Step-by-Step Solution
Key Concept
Profile Login IP Ranges vs. Org-wide Network Access Trusted IP Ranges