Salesforce Certified Identity and Access Management Practice

How can organizations enforce password policies in Salesforce?

1. By using the API to set custom rules

2. By setting rules through User Profile settings

3. By implementing mandatory training sessions

4. By limiting user access to the system

The correct answer is: By setting rules through User Profile settings

Organizations can enforce password policies in Salesforce primarily through the settings available in User Profiles. This approach allows administrators to define specific requirements regarding password length, complexity, expiration, and history directly within the settings of each User Profile. By tailoring these settings, organizations can ensure that all users who fall under a particular Profile adhere to the same password policies, which is crucial for maintaining security across the platform. In contrast, while the API provides a method for programmatic access and automation, it does not serve as a primary mechanism for enforcing password policies. Mandatory training sessions, although beneficial for raising awareness about security best practices, do not directly enforce password compliance on a technical level. Lastly, limiting user access is more concerned with permissions and accessibility rather than the enforcement of password policies.