An administrator at Apex Financial Services is configuring security settings to manage access for regional loan officers assigned to a custom profile. The company's corporate network uses the public IP range 198.51.100.1 to 198.51.100.50. The administrator configures a Profile Login IP Range of 198.51.100.10 to 198.51.100.25 on the Custom Loan Officer profile, while leaving the Organization-Wide Network Access settings blank. Which TWO outcomes occur when users assigned to this profile attempt to log in? (Select 2 answers)
- Users logging in from 198.51.100.15 are allowed access without receiving an identity verification (MFA/SMS) prompt.Cevap
- Users logging in from 198.51.100.5 are completely denied access to the organization.Cevap
- CUsers logging in from 198.51.100.5 are allowed to log in after successfully completing multi-factor authentication (MFA).
- DUsers logging in from 198.51.100.30 are prompted for identity verification because the IP falls outside the profile range but within corporate boundaries.
Cevap
Users logging in from within the profile's IP range (198.51.100.15) are granted immediate access without identity verification prompts, whereas users logging in from outside the profile's defined IP range (198.51.100.5) are completely denied access.
When Login IP Ranges are configured on a user profile, Salesforce enforces a strict whitelist mechanism. IP addresses falling within the profile range (such as 198.51.100.15) are granted access without requiring identity verification. Conversely, IP addresses outside the defined profile range (such as 198.51.100.5) are denied access immediately.
Adım Adım Çözüm
Anahtar Kavram
Profile Login IP Ranges vs. Organization-Wide Network Access Trusted IP Ranges