Security & Authentication Flashcards

What happens to data managed under a HubSpot integration when its connected app is uninstalled from the portal?

Answer: The app loses API access but data already synced into HubSpot remains

Uninstalling an app revokes its API access and stops future syncs, but data already written into HubSpot by the integration is not automatically deleted.

Which authentication method should a HubSpot admin configure to allow a third-party tool to send data INTO HubSpot without a user acting as the authenticator?

Answer: A private app token with appropriate write scopes

Private app tokens are designed for server-to-server integrations where no human user is present to authorize the OAuth flow.

In HubSpot's two-factor authentication setup, which 2FA methods are supported for users?

Answer: Authenticator app and SMS

HubSpot supports two 2FA methods: time-based one-time password (TOTP) via an authenticator app, and SMS text message codes.

What is the primary risk of sharing a single HubSpot user account login across multiple employees in a team?

Answer: It makes audit logs unreliable because actions cannot be attributed to specific individuals

Shared logins obscure individual accountability in audit logs, making it impossible to determine which person performed sensitive actions.

A developer requests access to read HubSpot deal data for a reporting integration. Which principle should guide the scopes granted to their private app?

Answer: Grant only the crm.objects.deals.read scope following least-privilege

Least-privilege means granting only the minimum scopes necessary for the integration's stated purpose — in this case, reading deals only.

When HubSpot's session timeout is configured, what occurs when a user's session expires?

Answer: The user is redirected to the HubSpot login page and must re-authenticate

Upon session expiration, HubSpot logs the user out and redirects them to the login page to re-authenticate before continuing.

Which HubSpot security feature can notify admins when a user logs in from an unrecognized device or location?

Answer: Login notification emails sent to the user

HubSpot sends login notification emails to users when a sign-in occurs from an unrecognized browser or device, alerting them to potential unauthorized access.