SF-Admin Configuration and Setup Practice Question
Exhibit
Login Policy Configuration:
{
"PasswordExpiration": "90 Days",
"EnforcePasswordHistory": "3 Passwords",
"MaximumInvalidLoginAttempts": "5",
"LockoutEffectivePeriod": "Forever"
}Refer to the exhibit. A user reports that their account is locked and they cannot log in. Based on the JSON configuration, what must the administrator do to restore access?
⚠ Common exam trap
Candidates often look for a 'Reset Password' button or assume a timeout will resolve the issue, failing to notice the 'Forever' lockout setting which explicitly requires manual intervention by an administrator.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Manually unlock the user account in Setup.
The provided configuration indicates a 'LockoutEffectivePeriod' set to 'Forever'. This means the system will not automatically unlock the user after a set time, which is a common security setting for high-compliance environments. The administrator must manually unlock the user account via the User detail page. This is critical for maintaining administrative control over account security and ensuring that unauthorized access attempts remain effectively blocked.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Wait for the lockout period to expire in 30 minutes.
Why it's wrong here
The exhibit explicitly defines the 'LockoutEffectivePeriod' as 'Forever'. Therefore, waiting for an automatic expiration is not a valid solution. The system will continue to block login attempts indefinitely until a manual intervention is performed by an administrator with the appropriate system permissions to unlock the account.
- ✗
Reset the user's password via the login screen.
Why it's wrong here
Resetting the password does not automatically unlock a user account that has been locked due to excessive failed attempts. The lock status is a separate state maintained by the security engine. The administrator must specifically unlock the account, as a password reset alone will not clear the active lockout flag.
- ✓
Manually unlock the user account in Setup.
Why this is correct
Since the lockout policy is set to 'Forever', the only way to re-enable the account is through an administrator performing the unlock action on the specific user detail record. This manual step ensures that security policies are enforced while allowing legitimate users to regain access after verification.
- ✗
Update the password history setting.
Why it's wrong here
The password history setting governs password reuse policies and has no functional link to the account lockout state. Modifying this setting will not unlock the account or allow the user to regain access. The administrator needs to focus specifically on the account status to resolve the current access issue.
About these practice questions
One of 202 original SF-Admin practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Salesforce exam blueprint
This SF-Admin practice question is part of Courseiva's free Salesforce certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SF-Admin exam.