Question 1
What is considered an "Identity Provider Initiated" login to an application?
Correct Answer:
A. After signing in to the CyberArk Identity portal, a user launches a SAML app by clicking an app tile.
Free CyberArk Defender Access ACCESS-DEF Exam Questions
Question 2
You are tasked to enforce certificate based authentication onto all the domain-joined Windows machines within your organization. Based on the inventory record, there are 1000 Windows machines, which include 150 standalone Windows machines. The enrollment will be conducted from either the office network or through the Virtual Private Network (VPN).
Which parameter(s) should you define within the enrollment code to ensure the security of the code and that only the authorized endpoints get registered?
Correct Answer:
A. Set an expiration date defining when the code should expire.; C. Define the enrollment code to only the specific office/VPN IP network segment.
Question 3
On which operating systems can the CyberArk Authenticator desktop application be installed? (Choose two.)
Correct Answer:
B. Windows 10; D. MacOS
Question 4
Where can you download the CyberArk Identity mobile app? (Choose two.)
Correct Answer:
C. Apple Agp Store; E. Google Play Store
Question 5
What is the most likely reason a CyberArk Identity admin would turn on the "Provisioning" feature within a Web App connector?
Correct Answer:
A. to ensure users are automatically on-boarded and off-boarded in a third-party application
Question 6
Refer to the exhibit.
Which statements are correct regarding this Authentication Policy? (Choose two.)
Correct Answer:
B. If users have set up CyberArk Mobile Authenticator as an MFA, they will still receive the Push Notification to confirm the request even if they mistyped their password.; C. Users will not be notified which challenge they failed if their login attempt failed.
Question 7
As part of compliance regulation, ACME Corporation is enforcing MFA for its critical business web-based application. To increase security and MFA compliance, CyberArk recommends selecting mechanisms from different categories. Within the authentication policy, ACME Corporation made the requirement to configure an authentication mechanism with "Something you know".
Which authentication mechanism meets this requirement?
Correct Answer:
B. Security Question
Question 8
A user's account information required for multi-factor authentication is not set up properly and is preventing the user from logging in.
What should you do?
Correct Answer:
A. Use the MFA Unlock command in the Admin Portal to suspend multifactor authentication for 10 minutes.
Question 9
CyberArk Identity has created a CLI integration with which vendor?
Correct Answer:
A. Amazon Web Services
Question 10
Your organization wants to limit access to the CyberArk Identity user portal to only corporate issued domain-joined laptops without the use of a VPN.
How can you achieve this?
Correct Answer:
A. Use the Windows Device Trust agent with certificate-based authentication.