Practice Test Geeks(HAC) HubSpot Administrator Certification Practice Test
← All HAC Flashcard Decks

Security & Authentication Flashcards

7 cards from real HAC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Security & Authentication flashcards as text

  1. What does HubSpot's IP allowlisting feature allow administrators to do?

    Answer: Restrict portal access to specific IP addresses or ranges

    IP allowlisting lets admins restrict HubSpot portal access to approved IP addresses or CIDR ranges, adding a network-layer security control.

  2. When a HubSpot admin enables 'require two-factor authentication' for the account, what happens to users who haven't set up 2FA?

    Answer: They are immediately logged out and cannot access HubSpot until 2FA is configured

    When account-level 2FA enforcement is enabled, users without 2FA configured are locked out and must set it up before gaining access.

  3. Which HubSpot permission controls whether a user can install or uninstall connected integrations?

    Answer: App Marketplace permission

    The App Marketplace permission governs a user's ability to install, configure, and remove third-party integrations from the HubSpot App Marketplace.

  4. What is the maximum number of active API keys a HubSpot portal can have at one time (legacy private app model)?

    Answer: 1

    Each HubSpot portal can have only one active legacy API key at a time, which is one reason private apps with tokens are now preferred.

  5. In HubSpot, what security advantage do private apps have over legacy API keys?

    Answer: Private apps use scoped tokens, limiting access to only permitted data

    Private app tokens are scoped to only the specific permissions granted during setup, reducing the blast radius if a token is compromised.

  6. Which login option can HubSpot admins configure to allow users to authenticate using corporate credentials without a separate HubSpot password?

    Answer: SAML-based Single Sign-On (SSO)

    SAML-based SSO lets users authenticate via an identity provider (like Okta or Azure AD) so they use corporate credentials to access HubSpot.

  7. What happens to a HubSpot user's session when an admin deactivates their account?

    Answer: The session is invalidated immediately and the user is logged out

    Deactivating a user in HubSpot immediately terminates their active sessions, preventing any further access.

How this page was made: written with AI tools. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy