Examkin

Question

Difficulty: MediumSession Settings and Password Policies

A Salesforce Administrator is configuring security controls for an enterprise organization. Match each security requirement scenario to the correct administrative configuration location in Salesforce Setup where it must be configured.

  • Enforce a 15-minute session inactivity timeout exclusively for users assigned to the Customer Support Representative profile.Profile Session Settings
  • Define the default organization-wide password complexity requirement to include alpha, numeric, and special characters.Organization-Wide Password Policies
  • Terminate active sessions and force re-authentication when a user's session expires due to inactivity across all profiles by default.Organization-Wide Session Settings
  • Set maximum invalid login attempts to 3 before locking out users specifically assigned to the System Administrator profile.Profile Password Policies

Answer

1. Enforce a 15-minute session timeout for a specific profile maps to Profile Session Settings. 2. Define default org-wide password complexity maps to Organization-Wide Password Policies. 3. Force logout on session timeout across all profiles maps to Organization-Wide Session Settings. 4. Set maximum invalid login attempts for a specific profile maps to Profile Password Policies.
Each scenario correctly differentiates between session settings (timeout/logout behavior) and password policies (lockout/complexity), as well as between organization-wide baseline defaults and profile-level override configurations.

Step-by-Step Solution

1
Analyze whether each requirement applies globally to the entire organization or is specific to a target profile.
Requirements targeting specific user profiles must be configured at the Profile level, whereas baseline defaults for the entire org belong at the Organization-Wide level.
Salesforce allows profile-level security policies to override default organization-wide settings for session timeout and password restrictions.
2
Distinguish between Session Settings and Password Policies for each scenario.
Timeouts and force logout behaviors are Session Settings; password complexity and lockout thresholds are Password Policies.
Session settings govern active user connections and session lifecycles, while password policies govern credential creation and login attempt constraints.
3
Map each scenario to its correct setup interface.
The profile session timeout maps to Profile Session Settings, org-wide complexity maps to Organization-Wide Password Policies, global forced logout maps to Organization-Wide Session Settings, and profile-specific lockout attempts map to Profile Password Policies.
This satisfies both the functional scope (Session vs Password) and administrative hierarchy (Org-wide default vs Profile override).

Key Concept

Salesforce Session Settings vs. Password Policies Hierarchy (Organization-Wide Defaults vs. Profile Overrides)
Estimated Time:1m 30s
Rate this question

Topics

Session Settings and Password Policies

More questions from this topic