Question

Difficulty: MediumLogin Security, Login IP Ranges, and Login Hours

A Salesforce Administrator at SolarSpark Energy configures login security for users assigned to the Call Center Representative profile. The administrator defines a Login IP Range on the profile of 192.168.1.1 to 192.168.1.100. Additionally, the corporate headquarters IP range of 10.0.0.1 to 10.0.0.255 is listed under organization-wide Network Access. A representative attempts to log in from an office computer with the IP address 10.0.0.45. Which outcome will occur upon this login attempt?

  1. The login attempt is denied because the user's IP address is outside the Login IP Ranges specified on their profile.Answer
  2. B
    The user logs in successfully without verification because the IP address is listed in the organization-wide Network Access trusted ranges.
  3. C
    The user is prompted to enter an identity verification code sent via email before being allowed to log in.
  4. D
    The user is logged in with restricted read-only permissions until an administrator approves the session.

Answer

The login attempt is denied because the user's IP address is outside the Login IP Ranges specified on their profile.
When Login IP Ranges are defined on a user profile in Salesforce, logins outside those specified ranges are strictly denied. Organization-wide Network Access settings (Trusted IP Ranges) only determine whether a user must verify their identity when logging in from a new IP; they do not grant access to users whose profile IP restrictions explicitly exclude their current IP address.

Step-by-Step Solution

1
Evaluate profile-level login security restrictions.
Login IP Ranges are defined on the user's profile as 192.168.1.1 to 192.168.1.100.
Profile-level IP restrictions take precedence and strictly enforce access boundaries.
2
Compare the user's login IP address against the defined Profile Login IP Ranges.
The user's IP address (10.0.0.45) falls outside the profile range of 192.168.1.1 to 192.168.1.100.
Any login attempt outside specified profile IP ranges is completely blocked by Salesforce.
3
Assess the impact of organization-wide Network Access trusted IP ranges.
Organization-wide Network Access settings (10.0.0.1 to 10.0.0.255) cannot override a profile-level IP restriction.
Org Network Access settings only control identity verification prompts for users without profile-level restrictions or within allowed ranges.

Key Concept

Profile IP Ranges vs. Org-Wide Network Access Trusted IP Ranges
Estimated Time:1m 30s
Rate this question