Examkin

Question

Difficulty: MediumUser Management and Provisioning

An enterprise financial firm is onboarding temporary external auditors who need access to system records. Company policy mandates that these auditors can only log in from approved corporate IP addresses and that their login capability must be immediately suspended upon audit completion without breaking existing workflow references or active record ownership. Which TWO administrative actions should be taken to meet these requirements? (Select TWO)

  1. Define the allowed IP address range under Login IP Ranges on the auditors' assigned profile.Answer
  2. Freeze the auditor user accounts when the audit ends to block login access while maintaining record ownership and workflow dependencies.Answer
  3. C
    Add the approved corporate IP addresses under Network Access in Company Information to restrict login access.
  4. D
    Deactivate the auditor accounts immediately when the audit ends to prevent logins while preserving open tasks and hierarchy references.

Answer

The administrator should define allowed IP address ranges on the profile level and freeze the user accounts upon audit completion.
Specifying Login IP Ranges on the profile level strictly prevents users assigned to that profile from logging in outside the designated network range. Additionally, freezing a user account immediately revokes login access without impacting record ownership, custom hierarchy fields, or running processes.

Step-by-Step Solution

1
Analyze login restriction requirements based on network access.
Identify that restricting login strictly to specific IP addresses requires setting Login IP Ranges on the Profile, as Network Access settings only trust IP ranges to bypass verification.
Profile-level IP ranges deny access completely when a user attempts to log in outside the designated IP list.
2
Evaluate post-audit offboarding controls for account access.
Determine that freezing the user account blocks immediate logins without removing record assignments or causing system reference errors.
Deactivation can fail or cause errors if the user is tied to processes or hierarchy fields, whereas freezing stops login capability cleanly.

Key Concept

Profile Login IP Ranges and User Account Freezing vs Deactivation
Estimated Time:1m 30s
Rate this question

Topics

User Management and Provisioning

More questions from this topic