A Salesforce Administrator at Cloud Heights Logistics is configuring login security controls for users assigned to the Support Specialist profile. The administrator configures specific IP ranges on the Support Specialist Profile and separate IP ranges under Organization-Wide Network Access.
Which two statements accurately describe how Salesforce enforces these IP restrictions? (Select 2 answers)
- Users attempting to log in from an IP address outside the Profile IP Ranges are completely blocked from accessing Salesforce.Answer
- Users logging in from an IP address within the Profile IP Ranges are granted access without receiving an identity verification prompt.Answer
- CUsers attempting to log in from an IP address outside the Profile IP Ranges can gain access by completing an identity verification challenge.
- DOrganization-Wide Network Access settings strictly block logins from unlisted IP addresses regardless of profile configuration.
Answer
Profile IP Ranges strictly deny login attempts from IP addresses outside the specified range. In addition, users logging in from IP addresses defined within Profile IP Ranges bypass identity verification prompts.
Profile IP Ranges enforce hard access restrictions. If an IP is outside the profile's allowed ranges, access is denied. If an IP is inside the profile's allowed ranges, the login is trusted and identity verification prompts are bypassed.
Step-by-Step Solution
Key Concept
Profile IP Ranges enforce strict login denial for unlisted IP addresses and bypass identity verification for listed IPs, whereas Organization-Wide Network Access only controls identity verification prompts.