What are two considerations for this configuration?

An administrator at Universal Containers has been asked to prevent users from accessing Salesforce from outside of their network.

What are two considerations for this configuration? Choose 2 answers
A . IP address restrictions are set on the profile or globally for the org.
B . Users can change their password to avoid login IP restrictions.
C . Enforce Login IP Ranges on Every Request must be selected to enforce IP restrictions.
D . Single sign-on will allow users to log in from anywhere.

Answer: A, C

Explanation:

IP address restrictions allow you to prevent users from accessing Salesforce from outside of their network. You can set IP address restrictions on the profile level or globally for the org. To enforce IP restrictions for API logins, you must select Enforce Login IP Ranges on Every Request in Session Settings.

Reference:

https://help.salesforce.com/s/articleView?id=sf.security_networkaccess.htm&type=5 https://help.salesforce.com/s/articleView?id=sf.security_enforce_ip_ranges.htm&type=5