Free Salesforce Administrator ADM-201 Actual Exam Questions - Question 7 Discussion
Salesforce org.
What Should the administrator do to prevent unauthorized access to Salesforce?
Maybe C makes sense too since setting org-wide defaults to the strictest level limits who can see or do what inside Salesforce after login, so even if someone unauthorized gets in, their access is limited.
B makes the most sense since disabling TLS (A) would weaken security and autocomplete (D) could expose info. Org-wide defaults (C) control data access but don’t stop unauthorized logins.
It’s B because enabling multi-factor authentication adds a strong barrier at login, making it harder for unauthorized users to get in even if they have stolen passwords. The others don’t stop login attempts like MFA does.
B/D? MFA (B) is solid for stopping unauthorized logins, but enabling caching and autocomplete (D) on login could actually risk security by exposing saved data. So D is out, B wins.
C imo, customizing org wide defaults helps limit access at the record level, so unauthorized users can’t see or edit sensitive info even if they get in. Adds a good layer of security.
It’s B, enabling multi factor authentication is the way to go here.