Soru

Zorluk: OrtaLogin Security, Login IP Ranges, and Login Hours

A Salesforce Administrator configures Organization-Wide Network Access with a trusted IP range of 203.0.113.0 to 203.0.113.255. Additionally, the administrator configures Profile-Level Login IP Ranges on the Call Center Agent profile with a range of 198.51.100.0 to 198.51.100.255.

Which two login outcomes will occur based on these combined security settings? (Select 2 answers)

  1. A Call Center Agent attempting to log in from IP address 203.0.113.50 is completely blocked from logging in.Cevap
  2. A standard user without profile-level IP restrictions attempting to log in from 198.51.100.50 must complete identity verification before gaining access.Cevap
  3. C
    A Call Center Agent attempting to log in from IP address 203.0.113.50 will receive an identity verification prompt to confirm their device.
  4. D
    Adding an IP range to organization-wide Network Access prevents users on all profiles from logging in outside of that range.

Cevap

A Call Center Agent attempting to log in from IP address 203.0.113.50 is completely blocked from logging in, and a standard user without profile-level IP restrictions attempting to log in from 198.51.100.50 must complete identity verification before gaining access.
Profile-level Login IP Ranges strictly dictate where users can log in from; any attempt outside the profile range results in an immediate denial, regardless of org-wide settings. For users with no profile IP ranges configured, logging in outside organization-wide Network Access trusted ranges triggers identity verification rather than blocking access.

Adım Adım Çözüm

1
Analyze profile-level Login IP Range rules for Call Center Agents.
Call Center Agents are restricted strictly to 198.51.100.0 - 198.51.100.255. Any login outside this range (e.g., 203.0.113.50) is blocked.
Profile IP ranges act as a hard security boundary.
2
Analyze Organization-Wide Network Access rules for users without profile IP restrictions.
IP 198.51.100.50 is not included in the org-wide Network Access range (203.0.113.0 - 203.0.113.255).
Logins from untrusted IP addresses require activation/identity verification for users without profile-level IP restrictions.

Anahtar Kavram

Profile-level Login IP Ranges enforce strict login access prohibition outside the designated range, whereas organization-wide Network Access IP ranges determine whether identity verification is required upon login.
Bu soruyu puanla