Soru

Zorluk: OrtaLogin Security, Login IP Ranges, and Login Hours

A Salesforce Administrator needs to restrict system access for users assigned to the Support Agent profile. The security requirement specifies that these users must only be allowed to log in when connecting from the corporate office network IP range (192.168.1.1 to 192.168.1.255), and any login attempt from outside this IP range must be immediately denied. Which configuration should the administrator implement to meet this requirement?

  1. Add the corporate office IP range to the Login IP Ranges settings directly on the Support Agent profile.Cevap
  2. B
    Add the corporate office IP range to Network Access under Organization-Wide Security Controls.
  3. C
    Create a Permission Set containing the IP range restriction and assign it to all Support Agent users.
  4. D
    Configure Session Settings to restrict IP access to the corporate office IP range for the entire organization.

Cevap

Add the corporate office IP range to the Login IP Ranges settings directly on the Support Agent profile.
Adding the corporate office IP range to the Login IP Ranges settings on the Support Agent profile creates a strict login restriction. When Login IP Ranges are defined on a profile, any user assigned to that profile attempting to log in from an IP address outside the specified range is immediately blocked from logging in.

Adım Adım Çözüm

1
Identify the level of security enforcement required.
The requirement specifies blocking login access completely for a specific profile (Support Agent) when outside a specific IP range.
Profile-level Login IP Ranges enforce hard login denials, whereas org-level Network Access ranges only bypass identity verification.
2
Navigate to the Support Agent profile configuration in Salesforce Setup.
Locate the Login IP Ranges section within the profile settings.
Login IP Restrictions are defined per profile and cannot be assigned via Permission Sets or Session Settings.
3
Add the start IP address (192.168.1.1) and end IP address (192.168.1.255).
Users assigned to this profile are strictly prohibited from logging in from any IP outside this specified range.
Configuring the range directly on the profile satisfies the requirement for profile-specific hard login access control.

Anahtar Kavram

Profile-Level Login IP Ranges vs. Org-Level Network Access
Tahmini Süre:1m 30s
Bu soruyu puanla