SP Network Fundamentals 2 — Questions and Answers
Question 1: A Salesforce admin notices that users on a corporate VPN cannot access Salesforce. What is the most likely cause?
- The VPN is blocking outbound HTTPS traffic on port 443 (Correct answer)
- Salesforce does not support VPN connections
- The users' session timeout is set too low
- Salesforce requires port 8080 for VPN users
Correct answer: The VPN is blocking outbound HTTPS traffic on port 443
Salesforce requires outbound HTTPS traffic on port 443, and a VPN policy blocking this port will prevent access.
Question 2: Which DNS record type maps a hostname to an IPv4 address?
- CNAME
- MX
- A (Correct answer)
- PTR
Correct answer: A
An A record (Address record) maps a hostname directly to an IPv4 address.
Question 3: When configuring Salesforce for an organization that uses a forward proxy, what must be done to allow Salesforce callouts?
- Add Salesforce IP ranges to the proxy's allowlist (Correct answer)
- Disable the forward proxy entirely
- Switch all callouts from HTTPS to HTTP
- Configure Salesforce to route traffic through port 25
Correct answer: Add Salesforce IP ranges to the proxy's allowlist
The forward proxy must be configured to allow traffic to Salesforce IP ranges so callouts can succeed.
Question 4: What is the purpose of a reverse proxy in front of a Salesforce-connected middleware?
- It encrypts data before it reaches Salesforce
- It hides backend server details and can handle SSL termination (Correct answer)
- It replaces the need for OAuth authentication
- It caches Salesforce session tokens locally
Correct answer: It hides backend server details and can handle SSL termination
A reverse proxy sits in front of backend servers to abstract their details and can terminate SSL connections.
Question 5: Which protocol does Salesforce primarily use for REST API communications?
- FTP over port 21
- HTTPS over port 443 (Correct answer)
- HTTP over port 80
- SMTP over port 587
Correct answer: HTTPS over port 443
Salesforce REST API communications are conducted over HTTPS on port 443 for security.
Question 6: An organization's firewall must be updated to allow Salesforce outbound email delivery. Which port range should be opened?
- Port 25 or 587 for SMTP (Correct answer)
- Port 443 for HTTPS
- Port 3306 for MySQL
- Port 1433 for SQL Server
Correct answer: Port 25 or 587 for SMTP
SMTP uses port 25 (standard) or 587 (submission), which must be allowed for outbound email delivery.
Question 7: What does TTL (Time to Live) control in a DNS record?
- How long a DNS response is cached before being refreshed (Correct answer)
- The maximum number of hops a packet can take
- The timeout for a Salesforce session
- The expiration date of an SSL certificate
Correct answer: How long a DNS response is cached before being refreshed
TTL in a DNS record specifies the duration (in seconds) that resolvers cache the record before querying again.
SP Network Fundamentals 2
A Salesforce admin notices that users on a corporate VPN cannot access Salesforce.
What is the most likely cause?