A Salesforce Administrator needs to restrict system access for users assigned to the Support Agent profile. The security requirement specifies that these users must only be allowed to log in when connecting from the corporate office network IP range (192.168.1.1 to 192.168.1.255), and any login attempt from outside this IP range must be immediately denied. Which configuration should the administrator implement to meet this requirement?
- Add the corporate office IP range to the Login IP Ranges settings directly on the Support Agent profile.Answer
- BAdd the corporate office IP range to Network Access under Organization-Wide Security Controls.
- CCreate a Permission Set containing the IP range restriction and assign it to all Support Agent users.
- DConfigure Session Settings to restrict IP access to the corporate office IP range for the entire organization.
Answer
Add the corporate office IP range to the Login IP Ranges settings directly on the Support Agent profile.
Adding the corporate office IP range to the Login IP Ranges settings on the Support Agent profile creates a strict login restriction. When Login IP Ranges are defined on a profile, any user assigned to that profile attempting to log in from an IP address outside the specified range is immediately blocked from logging in.
Step-by-Step Solution
Key Concept
Profile-Level Login IP Ranges vs. Org-Level Network Access
Estimated Time:1m 30s