Salesforce App Builder Practice Exam

Which method cannot be used to secure data at the organization level?

1. Limit Login IP addresses

2. Limit Login Hours

3. Set password policies

4. Use hardware token

The correct answer is: Use hardware token

The method that cannot be used to secure data at the organization level is the use of hardware tokens. This is primarily because hardware tokens are specific to user authentication and serve as a second factor in two-factor authentication (2FA) systems rather than applying to broader organizational data security policies. Limit Login IP addresses, limit login hours, and set password policies are all policies or settings that apply to the organization as a whole. They define how users can access the system, which ultimately impacts data security across all users in the organization. For instance, limiting login IP addresses restricts where users can log in from, control over login hours helps prevent unauthorized access during off-hours, and establishing password policies enforces standards for password complexity and expiration across the organization. In contrast, hardware tokens are typically issued to individual users and are not an organizational security policy. They're focused on enhancing security for individual accounts, thereby not fitting within the paradigm of organization-wide data security measures.