Question

Difficulty: MediumSession Settings and Password Policies

An organization requires strict session controls for users assigned to the Customer Support Representative profile due to shared call-center workstations. Specifically, these users must be logged out automatically after 15 minutes of inactivity, and their sessions must terminate immediately upon timeout without allowing session extension. Other profiles in the organization should maintain the default 2-hour session timeout. Which administrative configuration should be modified to meet this requirement?

  1. Configure the Session Settings directly within the Customer Support Representative profile to set the inactivity timeout to 15 minutes and enable forced logout on session timeout.Answer
  2. B
    Update the Organization-Wide Session Settings timeout to 15 minutes, then assign a permission set to all non-support profiles to extend their session duration to 2 hours.
  3. C
    Add the call-center IP range to Organization-Wide Network Access settings and set the automatic disconnect threshold to 15 minutes.
  4. D
    Create a custom Permission Set Group containing a session policy setting of 15 minutes and assign it to the support team members.

Answer

Configure the Session Settings directly within the Customer Support Representative profile to set the inactivity timeout to 15 minutes and enable forced logout on session timeout.
Salesforce administrators can override Organization-Wide Session Settings at the Profile level. Modifying the Session Settings section on the Customer Support Representative profile allows setting a 15-minute inactivity timeout and enabling forced logout upon timeout specifically for assigned users without affecting standard organization settings.

Step-by-Step Solution

1
Identify the level of security enforcement required.
The requirement specifies session timeout rules targeted exclusively at users assigned to a specific profile (Customer Support Representative).
Salesforce allows administrators to override global session settings on a per-profile basis.
2
Evaluate supported location for session overrides.
Profile settings contain a dedicated Session Settings section where Timeout value and 'Force logout on session timeout' can be configured.
Permission sets and organization-wide network access ranges do not support defining session inactivity duration or logout triggers.
3
Confirm profile override precedence.
Profile-level session settings supersede the Organization-Wide Session Settings for users assigned to that profile.
This leaves the rest of the organization operating under the default 2-hour org-wide session setting while strictly enforcing 15-minute forced logout for support staff.

Key Concept

Profile-Level Session Settings Overrides
Estimated Time:1m 30s
Rate this question