Examkin

Question

Difficulty: EasyLogin Security, Login IP Ranges, and Login Hours

A system administrator configures Profile-level Login IP Ranges for a custom support profile. A user assigned to this profile attempts to log in from an IP address that falls outside of the defined profile IP range. What is the result of this login attempt?

  1. The login attempt is blocked, and the user is completely denied access.Answer
  2. B
    The user is prompted to verify their identity via activation code or multi-factor authentication.
  3. C
    The user is allowed to log in but is restricted to read-only permissions across all objects.
  4. D
    The login attempt succeeds normally, but an alert email is sent to the administrator.

Answer

The login attempt is blocked, and the user is completely denied access.
When Login IP Ranges are defined on a user's Profile, Salesforce strictly restricts login access to only those specified IP ranges. Any attempt to log in from an IP address outside the defined range is denied outright.

Step-by-Step Solution

1
Identify the level of security setting being applied
The setting applied is at the Profile level (Profile Login IP Ranges).
Profile-level IP ranges dictate hard login access restrictions.
2
Evaluate the behavior of Profile-level Login IP Ranges
Users attempting to log in from an IP address outside the profile's allowed IP range are denied access completely.
Unlike organization-wide Network Access settings (which prompt for identity verification), Profile IP ranges act as a strict block.

Key Concept

Profile-level Login IP Ranges enforcement vs. Org-level Network Access
Rate this question

Topics

Login Security, Login IP Ranges, and Login Hours

More questions from this topic