Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Salesforce Certified Administrator · Salesforce
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The correct answers are: A. Profile-based IP restrictions B. Organization-wide IP restrictions C. Profile-based login hour restrictions Explanation: 1. Profile-based IP restrictions: Salesforce allows administrators to specify IP ranges at the profile level. Users assigned to the profile can log in only from the specified IP addresses. 2. Organization-wide IP restrictions: Salesforce can enforce IP restrictions organization-wide using trusted IP ranges. These ranges define which IP addresses are allowed to bypass login challenges (like verification codes). 3. Profile-based login hour restrictions: Administrators can restrict login hours for users at the profile level. Outside the specified hours, users cannot log in. Incorrect Option: • D. Organization-wide login hour restrictions: Salesforce does not provide a way to enforce login hour restrictions at the organization-wide level. This feature is only available at the profile level.
B. is a valid answer https://developer.salesforce.com/docs/atlas.en-us.securityImplGuide.meta/securityImplGuide/login_ip_ranges.htm#:~:text=You%20can%20further%20restrict%20access,that%20have%20login%20IP%20restrictions. To restrict IP addresses in profiles: From Setup, in the Quick Find box, enter Profiles, and then select Profiles. Depending on which user interface you're using, do one of the following: In the enhanced profile user interface, click Login IP Ranges, and then click Add IP ranges. In the original profile user interface, scroll down to the Login IP Ranges related list, and then click New. Specify allowed IP addresses for the profile. Enter a valid IP address in the IP Start Address field and a higher-numbered IP address in the IP End Address field. To allow logins from a single IP address, enter the same address in both fields. The IP addresses in a range must be either IPv4 or IPv6. ...
Org level: You can further restrict access to Salesforce to only those IPs in Login IP Ranges. To enable this option, in Setup, in the Quick Find box, enter Session Settings, and then select Session Settings. Select Enforce login IP ranges on every request. This option affects all user profiles that have login IP restrictions.