HAC HubSpot Administrator User Permissions & Security 3 — Questions and Answers
Question 1: A company wants to ensure only users from their office IP range can access HubSpot. Which security feature supports this?
- SSO enforcement
- IP allowlisting (Correct answer)
- Two-factor authentication
- Permission sets
Correct answer: IP allowlisting
IP allowlisting restricts portal access to specific IP addresses or ranges, blocking logins from unauthorized networks.
Question 2: A HubSpot permission set has 'Edit' access to contacts but 'View Only' for companies. What can a user with this set do?
- Edit both contacts and companies
- Edit contacts but only view companies (Correct answer)
- View contacts and edit companies
- View both contacts and companies only
Correct answer: Edit contacts but only view companies
Permission sets apply per object type, so a user can have different access levels for contacts versus companies.
Question 3: What is the maximum number of permission sets that can be assigned to a single user in HubSpot?
- 1 (Correct answer)
- 2
- 5
- Unlimited
Correct answer: 1
Each user can only be assigned one permission set at a time in HubSpot.
Question 4: An admin wants only certain users to see the Revenue Analytics report. Which approach is correct in HubSpot?
- Use a private dashboard and share it only with selected users
- Enable the report behind a feature flag
- Assign the Reports permission only to those users (Correct answer)
- Move the report to a restricted folder
Correct answer: Assign the Reports permission only to those users
The Reports permission controls who can view and create reports; restricting it limits access to Revenue Analytics.
Question 5: Which HubSpot setting controls whether users can communicate with unsubscribed contacts?
- GDPR tools under Data Privacy (Correct answer)
- Communication subscription settings under Account Defaults
- Email permission under user settings
- Opt-out enforcement under Marketing Access
Correct answer: GDPR tools under Data Privacy
GDPR tools and data privacy settings govern how and whether users can interact with contacts who have unsubscribed.
Question 6: When SCIM provisioning is configured in HubSpot, what task does it automate?
- Automatically creating email campaigns for new users
- Creating, updating, and deactivating HubSpot users from an identity provider (Correct answer)
- Syncing CRM data with external databases
- Generating reports on user activity
Correct answer: Creating, updating, and deactivating HubSpot users from an identity provider
SCIM (System for Cross-domain Identity Management) automates user lifecycle management by syncing users from an IdP like Okta into HubSpot.
Question 7: A user's two-factor authentication (2FA) device is lost. As an admin, what is the correct action?
- Delete and recreate the user account
- Reset the user's 2FA from the Users & Teams settings (Correct answer)
- Disable 2FA enforcement for the entire portal temporarily
- Contact HubSpot support to reset the portal password
Correct answer: Reset the user's 2FA from the Users & Teams settings
Admins can reset a specific user's 2FA requirement from the Users & Teams page without affecting the rest of the portal.
HAC HubSpot Administrator User Permissions & Security 3
A company wants to ensure only users from their office IP range can access HubSpot.
Which security feature supports this?