Examkin

Question

Difficulty: MediumUser Management and Provisioning

A financial services company enforces a strict compliance policy requiring customer service representatives to access Salesforce exclusively from the designated corporate VPN IP ranges. If a representative attempts to log in from any external or unrecognized IP address, Salesforce must immediately deny the login attempt. Which administration setting should the Salesforce Administrator configure to enforce this requirement?

  1. Define the allowed IP address range under Login IP Ranges on the Customer Service Profile.Answer
  2. B
    Add the corporate VPN IP address range to Network Access under Organization Setup.
  3. C
    Create a Permission Set containing the allowed IP range and assign it to the customer service representatives.
  4. D
    Set up a workflow rule to freeze user accounts whenever a login occurs from an unverified IP address.

Answer

Configure Login IP Ranges directly on the Customer Service Profile.
Specifying IP ranges in the Login IP Ranges section of a Profile strictly limits where users assigned to that Profile can log in from. Any attempt to log in from an IP address outside the specified range is blocked immediately.

Step-by-Step Solution

1
Identify the security policy requirement
Login attempts from unauthorized IP addresses must be strictly blocked.
The requirement calls for absolute restriction rather than simple multi-factor authentication (MFA) bypass.
2
Evaluate Salesforce IP restriction features
Profile-level Login IP Ranges explicitly enforce login restrictions and block access outside the listed ranges.
Org-wide Network Access only manages trusted IPs for bypassing verification codes, whereas Profile Login IP Ranges completely prohibit unauthorized IP logins.
3
Select the appropriate user administration control
Add the allowed corporate IP range to the target user Profile under Login IP Ranges.
This directly satisfies the requirement for profile-based users.

Key Concept

Profile Login IP Ranges vs. Network Access IP Ranges
Rate this question

Topics

User Management and Provisioning

More questions from this topic