Salesforce Certified Identity and Access Management Practice

When a user logs in from outside a trusted IP range and uses a browser or app Salesforce doesn't recognize, what are the highest-priority verification methods used?

1. Verification code sent via email to the user's email address.

2. Verification via push notification with a mobile app.

3. Verification via fingerprint scanning.

4. Verification code sent via regular mail to the user's physical address.

The correct answer is: Verification via push notification with a mobile app.

The highest-priority verification method in this scenario is the verification via push notification with a mobile app. This method is prioritized because it leverages real-time notification capabilities, allowing for a seamless user experience while maintaining a strong security posture. The push notification method typically involves the Salesforce mobile app, which is designed to send a prompt directly to the user’s smartphone, thereby verifying their identity effectively. Push notifications serve as an immediate and secure way for users to confirm their login attempts, enhancing security through two-factor authentication. Since this method requires the user to have access to their mobile device where the app is installed, it significantly reduces the risk of unauthorized access when compared to options like email or physical mail, which may introduce delays or potential security risks. In contrast, while other methods such as verification codes sent via email are common, they are less immediate than push notifications. Verification codes sent via regular mail are impractical for real-time verification due to longer delivery times. Fingerprint scanning can be effective but depends on hardware compatibility and setup, which may not be available for all users. Therefore, the push notification option stands out as the most effective method for ensuring quick and secure user verification in this context.