Salesforce Certified Identity and Access Management Designer — Question 32

Universal Containers (UC) employees have Salesforce access from restricted IP ranges only, to protect against unauthorized access. UC wants to roll out the Salesforce mobile app and make it accessible from any location.
Which two options should an Architect recommend? (Choose two.)

Answer options

• A. Use Login Flow to bypass IP range restriction for the mobile app.
• B. Relax the IP restriction with a second factor in the Connect App settings for Salesforce mobile app.
• C. Relax the IP restriction in the Connect App settings for the Salesforce mobile app.
• D. Remove existing restrictions on IP ranges for all types of user access.

Correct answer: B, C

Explanation

Option B is correct because adding a second factor enhances security while allowing more flexibility with IP restrictions for the mobile app. Option C is also correct as it directly modifies the Connect App settings to allow broader access. Options A and D are not advisable; A bypasses security measures while D completely removes all restrictions, which could expose UC to significant risks.