Soru

Zorluk: ZorLogin Security, Login IP Ranges, and Login Hours

An administrator at Apex Financial Services is configuring security settings to manage access for regional loan officers assigned to a custom profile. The company's corporate network uses the public IP range 198.51.100.1 to 198.51.100.50. The administrator configures a Profile Login IP Range of 198.51.100.10 to 198.51.100.25 on the Custom Loan Officer profile, while leaving the Organization-Wide Network Access settings blank. Which TWO outcomes occur when users assigned to this profile attempt to log in? (Select 2 answers)

  1. Users logging in from 198.51.100.15 are allowed access without receiving an identity verification (MFA/SMS) prompt.Cevap
  2. Users logging in from 198.51.100.5 are completely denied access to the organization.Cevap
  3. C
    Users logging in from 198.51.100.5 are allowed to log in after successfully completing multi-factor authentication (MFA).
  4. D
    Users logging in from 198.51.100.30 are prompted for identity verification because the IP falls outside the profile range but within corporate boundaries.

Cevap

Users logging in from within the profile's IP range (198.51.100.15) are granted immediate access without identity verification prompts, whereas users logging in from outside the profile's defined IP range (198.51.100.5) are completely denied access.
When Login IP Ranges are configured on a user profile, Salesforce enforces a strict whitelist mechanism. IP addresses falling within the profile range (such as 198.51.100.15) are granted access without requiring identity verification. Conversely, IP addresses outside the defined profile range (such as 198.51.100.5) are denied access immediately.

Adım Adım Çözüm

1
Analyze profile-level IP range enforcement rules in Salesforce.
Profile Login IP Ranges define strict allowed boundaries for user access.
Unlike organization-wide Network Access setting (which dictates whether identity verification is required), profile IP ranges serve as a hard security boundary.
2
Evaluate the login attempt from 198.51.100.15 against the profile restriction (198.51.100.10 to 198.51.100.25).
The IP address 198.51.100.15 falls inside the allowed range.
Logins within profile IP boundaries are trusted and proceed without identity challenge.
3
Evaluate the login attempt from 198.51.100.5 against the profile restriction (198.51.100.10 to 198.51.100.25).
The IP address 198.51.100.5 falls outside the allowed profile range.
Any login attempt outside defined profile IP ranges results in an immediate restriction denial rather than a verification prompt.

Anahtar Kavram

Profile Login IP Ranges vs. Organization-Wide Network Access Trusted IP Ranges
Bu soruyu puanla