An administrator at ApexCare Services is configuring security controls for a team of remote support specialists. The organization's Network Access settings (Organization-Wide Trusted IP Ranges) are defined as to . To enforce stricter controls, the administrator defines Profile-Level Login IP Ranges on the Support Specialist profile as to . A support specialist attempts to log into Salesforce from IP address . Which access outcome will occur?
- The login attempt is completely denied because Profile IP Ranges act as an explicit restriction, blocking any IP address outside the profile's defined range regardless of Organization-Wide settings.Cevap
- BThe specialist is allowed to log in without identity verification because the IP address falls within the Organization-Wide Trusted IP Ranges.
- CThe specialist is prompted for two-factor verification before gaining access because the IP address is outside the profile range but inside the org range.
- DThe login is successful only if the user appends a valid security token to their password upon authenticating.
Cevap
The login attempt is completely denied because Profile IP Ranges act as an explicit restriction, blocking any IP address outside the profile's defined range regardless of Organization-Wide settings.
When Profile-Level Login IP Ranges are configured on a profile, Salesforce enforces a strict security perimeter. Any attempt to log in from an IP address outside the profile's range is blocked completely. Organization-Wide Network Access trusted IP ranges only bypass identity verification for profiles that have no Profile IP Ranges defined.
Adım Adım Çözüm
Anahtar Kavram
Profile IP Ranges vs. Organization-Wide Network Access