CyberArk ACCESS-DEF - CyberArk Defender Access Exam
Page: 2 / 13
Total 64 questions
Question #6 (Topic: Exam A)
ACME Corporation employees access critical business web applications through CyberArk Identity. You notice a constant high volume of unauthorized traffic from 103.1.200.0/24 trying to gain access to the CyberArk Identity portal. Access to the CyberArk Identity portal is time sensitive. ACME decides to enforce IP restrictions to reduce vulnerability.
Which configuration can help achieve this?
Which configuration can help achieve this?
A. Log in to the CyberArk Identity Admin portal and define the IP range of 103.1.200.0/24 into the ACME Corporation IP range.
B. Log in to the CyberArk Identity Admin portal and define the IP range of 103.1.200.0/24 into the blocked IP range.
C. Implement device trust through the Windows Cloud Agent.
D. Implement zero trust through the App Gateway.
Answer: B
Question #7 (Topic: Exam A)
Refer to the exhibit.
Which statements are correct regarding this Authentication Policy? (Choose two.)
Which statements are correct regarding this Authentication Policy? (Choose two.)
A. Users will still be asked for their MFA even if they mistyped their username.
B. If users have set up CyberArk Mobile Authenticator as an MFA, they will still receive the Push Notification to confirm the request even if they mistyped their password.
C. Users will not be notified which challenge they failed if their login attempt failed.
D. If users have set up a Security Question as an MFA, the Security Question will not be displayed to the user to answer even if they mistyped their password.
E. If the first factor is password and the user is an Active Directory user and the Active Directory is unavailable, this setting does not matter because the user will not be able to authenticate through Active Directory credentials and will see the message "Active Directory not available".
Answer: BC
Question #8 (Topic: Exam A)
DRAG DROP
Your organization wants to automatically create user accounts with different Salesforce licenses (e.g., Salesforce, Identity, Chatter External).
In CyberArk Identity, arrange the steps to achieve this in the correct sequence.
Your organization wants to automatically create user accounts with different Salesforce licenses (e.g., Salesforce, Identity, Chatter External).
In CyberArk Identity, arrange the steps to achieve this in the correct sequence.
Answer: 
Question #9 (Topic: Exam A)
DRAG DROP
Match each User Portal tab to the correct description.
Match each User Portal tab to the correct description.
Answer: 
Question #10 (Topic: Exam A)
Refer to the exhibit.
Within the "Allow user notifications on multiple devices", if you leave the setting as Default (--), what happens if a user triggers a MFA Push notification and has enrolled three different devices?
Within the "Allow user notifications on multiple devices", if you leave the setting as Default (--), what happens if a user triggers a MFA Push notification and has enrolled three different devices?
A. The push notification will be sent to none of the enrolled devices.
B. The push notification will be sent to the first enrolled device only.
C. The push notification will be sent to all enrolled devices.
D. The push notification will be sent to the last enrolled device only.
Answer: B
