HAC Security & Authentication 2

Question 1

What does HubSpot's IP allowlisting feature allow administrators to do?

Accepted Answer

Restrict portal access to specific IP addresses or ranges

Answer

IP allowlisting lets admins restrict HubSpot portal access to approved IP addresses or CIDR ranges, adding a network-layer security control.

Question 2

When a HubSpot admin enables 'require two-factor authentication' for the account, what happens to users who haven't set up 2FA?

Accepted Answer

They are immediately logged out and cannot access HubSpot until 2FA is configured

Answer

When account-level 2FA enforcement is enabled, users without 2FA configured are locked out and must set it up before gaining access.

Question 3

Which HubSpot permission controls whether a user can install or uninstall connected integrations?

Accepted Answer

App Marketplace permission

Answer

The App Marketplace permission governs a user's ability to install, configure, and remove third-party integrations from the HubSpot App Marketplace.

Question 4

What is the maximum number of active API keys a HubSpot portal can have at one time (legacy private app model)?

Accepted Answer

1

Answer

Each HubSpot portal can have only one active legacy API key at a time, which is one reason private apps with tokens are now preferred.

Question 5

In HubSpot, what security advantage do private apps have over legacy API keys?

Accepted Answer

Private apps use scoped tokens, limiting access to only permitted data

Answer

Private app tokens are scoped to only the specific permissions granted during setup, reducing the blast radius if a token is compromised.

(HAC) HubSpot Administrator Certification Practice Test