An administrator at Universal Containers has configured Profile-level Login IP Ranges on the Custom Sales User profile to allow access only from the corporate office IP range (192.168.1.1 to 192.168.1.100). To accommodate remote sales reps, the administrator also added the home internet IP range (203.0.113.0 to 203.0.113.255) under Setup > Network Access (Organization-Wide Trusted IP Ranges). A sales user attempts to log in from home using IP address 203.0.113.50 during allowed login hours. What will happen when the user attempts to log in?
- The login attempt is completely denied because Profile Login IP Ranges explicitly restrict access outside the defined range, regardless of Network Access settings.Cevap
- BThe login attempt succeeds without identity verification because the IP address is included in Network Access trusted IP ranges.
- CThe user is prompted for identity verification (activation code), after which access is granted.
- DThe login attempt is allowed only if the user is logging in during business hours configured in the profile's Login Hours.
Cevap
The login attempt is completely denied because Profile Login IP Ranges explicitly restrict access outside the defined range, regardless of Network Access settings.
Profile-level Login IP Ranges define a hard boundary for access. If any IP range is defined on a user's profile, the user can ONLY log in from IP addresses within those specific profile ranges. Organization-wide Network Access settings (trusted IP ranges) serve to bypass multi-factor/identity verification prompts for users who do not have profile-level restrictions, but they cannot grant access to users blocked by profile-level IP restrictions.
Adım Adım Çözüm
Anahtar Kavram
Profile Login IP Ranges vs. Organization-Wide Network Access Trusted IP Ranges