A Salesforce Administrator sets Organization-Wide Network Access to include the IP range 198.51.100.0 to 198.51.100.255. To restrict access for users assigned to the Call Center Agent profile, the administrator configures Profile-level Login IP Ranges to 198.51.100.10 through 198.51.100.50 and sets Profile Login Hours to Monday through Friday, 8:00 AM to 5:00 PM.
Which two login outcomes will occur based on these combined security settings?
- Users assigned to the Call Center Agent profile attempting to log in from IP address 198.51.100.100 are completely denied login access.Answer
- BUsers assigned to the Call Center Agent profile attempting to log in from IP address 198.51.100.100 are granted login access after completing identity verification via security code.
- Users assigned to the Call Center Agent profile attempting to log in at 6:30 PM on a Tuesday are blocked from logging in.Answer
- DUsers assigned to other profiles without profile IP restrictions are denied login access when connecting from IP address 198.51.100.100.
Answer
Users on the Call Center Agent profile logging in from IP 198.51.100.100 are completely denied access, and users on that profile attempting to log in at 6:30 PM on a Tuesday are blocked from logging in.
Profile-level Login IP Ranges restrict login access completely when an attempt originates outside the defined IP range, resulting in immediate login denial rather than an activation prompt. Additionally, Profile Login Hours strictly limit authentication to the defined schedule; attempts made at 6:30 PM (outside the 8:00 AM to 5:00 PM window) are rejected.
Step-by-Step Solution
Key Concept
Difference between Profile-level Login IP Ranges (hard denial outside range) and Org-level Network Access (identity verification bypass inside range), combined with Profile Login Hours enforcement.