A Salesforce Administrator is configuring security settings for customer support representatives assigned to a custom profile. The administrator needs to implement IP security controls using both Profile Login IP Ranges and Organization-Wide Network Access settings. Which two statements accurately describe how Salesforce enforces these login IP restrictions? (Select 2 answers)
- Users attempting to log in from an IP address outside their defined Profile Login IP Ranges are completely denied access.Answer
- Users attempting to log in from an IP address outside the Organization-Wide Network Access ranges are prompted for identity verification rather than being denied access.Answer
- CUsers attempting to log in from an IP address outside their defined Profile Login IP Ranges can gain entry by successfully completing multi-factor authentication.
- DConfiguring Organization-Wide Network Access ranges automatically blocks all login attempts originating from unlisted IP addresses.
Answer
The correct statements are that Profile Login IP Ranges enforce absolute restriction (hard denial) for logins outside the range, while Organization-Wide Network Access ranges determine whether identity verification is required.
Profile Login IP Ranges enforce a strict security policy where any login request outside the specified range is immediately denied. Conversely, Organization-Wide Network Access defines trusted IP ranges across the organization; logging in from outside these trusted ranges requires users to complete identity verification rather than preventing them from logging in.
Step-by-Step Solution
Key Concept
Profile Login IP Ranges vs. Organization-Wide Network Access IP Ranges
Estimated Time:1m 30s