Security-and-Privacy-Accredited-Professional Practice Test

Salesforce does not allow email or SMS text messages as verification methods for MFA.
Which two reasons explain this? (2 options)

A. Entering codes from text messages is error-prone

B. Mobile devices can be lost or broken

C. Email account credentials can be compromised

D. SIM cards can be hacked

Which two reasons explain this?

A. Entering codes from text messages is error-prone

B. Mobile devices can be lost or broken

C. Email account credentials can be compromised

D. SIM cards can be hacked

Which three standard authentication protocols does Salesforce support to integrate external applications using APIs?

A. OpenID Connect

B. Single Sign On (SSO)

C. OMFA

D. Security Assertion Markup Language (SAML)

E. OAuth

You need to limit when and where from users can access Salesforce- to help reduce the risks of unauthorized access. How should you go about this.

A. Restrict Access based on Login IP Addresses but login hairs can't be set up in conjunction with this feature

B. Use MFA to help ensure users are using a more secure login process

C. Restrict Access based on Login IP Addresses and use the Login Hours feature together

D. Do not allow users to access Salesforce from outside the office.

MFA is enabled at which level for Marketing Cloud-Email Studio, Mobile Studio, and Journey Builder?

A. User level

B. Top-level account

C. Role level

D. Business unit level