Examkin

Question

Difficulty: MediumSession Settings and Password Policies

Universal Containers enforces a standard 2-hour session inactivity timeout across the organization. To comply with internal security policies, users in the Finance department must have a stricter 15-minute inactivity session timeout applied to their logins. Which administrative configuration should be used to enforce this requirement exclusively for the Finance team?

  1. Edit the Profile assigned to Finance users and configure the Session Timeout setting to 15 minutes.Answer
  2. B
    Create a Permission Set with a 15-minute session timeout rule and assign it to each Finance user.
  3. C
    Change the Organization-Wide Session Timeout to 15 minutes and create a Permission Set extending the timeout to 2 hours for non-Finance users.
  4. D
    Define a Network Access IP Range for the Finance IP subnet to automatically terminate active sessions after 15 minutes.

Answer

Edit the Profile assigned to Finance users and configure the Session Timeout setting to 15 minutes.
In Salesforce, session inactivity timeouts are established globally under Session Settings, but administrators can override session timeouts for specific user groups by modifying the Session Timeout setting directly on their assigned Profile.

Step-by-Step Solution

1
Identify where session inactivity policies are evaluated in Salesforce.
Salesforce evaluates Organization-Wide Session Settings first, but allows Profile-level settings to override the organization default for users assigned to that Profile.
Profile-level session settings take precedence over Organization-Wide Session Settings.
2
Evaluate whether Permission Sets can configure session timeout policies.
Permission Sets grant functional permissions and object access, but do not contain session timeout policies.
Session security policies (timeout, password policy overrides) are maintained on Profiles.
3
Select the correct administrative action.
Configuring the 15-minute session timeout directly on the Finance Profile achieves targeted security compliance without affecting other users.
It fulfills the requirement cleanly using native Salesforce security architecture.

Key Concept

Profile-Level Session Setting Overrides
Rate this question

Topics

Session Settings and Password Policies

More questions from this topic