Question

Difficulty: EasySession Settings and Password Policies

A Salesforce administrator needs to apply stricter password requirements specifically for users assigned to the Support Specialist profile. Which TWO password policy settings can be customized directly at the individual Profile level? (Select TWO)

  1. Maximum Invalid Login AttemptsAnswer
  2. User Password Expiration PeriodAnswer
  3. C
    Organization-wide Network Access IP Ranges
  4. D
    Permission Set Password Policy Overrides

Answer

Maximum Invalid Login Attempts and User Password Expiration Period can be customized at the Profile level.
Salesforce permits administrators to override organization-wide password policy defaults on individual Profiles. Maximum Invalid Login Attempts (lockout threshold) and User Password Expiration Period are both valid Profile-level password policy settings.

Step-by-Step Solution

1
Identify where password policy overrides take place in Salesforce administration.
Password policies exist at the Organization-Wide level and can be overridden on individual user Profiles.
Salesforce allows administrators to apply custom security settings per Profile when specific user roles require tighter security.
2
Evaluate which options represent settings that can be overridden on a Profile.
Maximum Invalid Login Attempts and User Password Expiration Period are configurable within Profile Password Policies.
These parameters control account lockout thresholds and password lifetimes for users assigned to that Profile.
3
Filter out non-profile or non-password settings.
Network Access IP ranges are configured globally under Network Access, and Permission Sets do not support password policy assignments.
Network Access is an organization-wide setting, and Permission Sets add permissions rather than defining Profile-level password governance.

Key Concept

Profile-Level Password Policy Overrides
Rate this question