ACCESS-DEF Exam Questions
62 real ACCESS-DEF exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1Authentication and Authorization
A user wants to install the CyberArk Identity mobile app by using a QR code. Arrange the steps to do this in the correct sequence.
mobile app enrollmentQR code setupCyberArk Identity appauthenticator configuration - Question #2Authentication and Authorization
Where can MFA filters be used? (Choose three.)
MFA/Multi-Factor AuthenticationAuthentication MethodsPortal LoginAccess Controls - Question #3Authentication and Authorization
Which 2FA/MFA options can be used if users cannot use their mobile device? (Choose two.)
MFA/2FA methodsFIDO2Passwordless authenticationDevice constraints - Question #4Authentication and Authorization
A user's account information required for multi-factor authentication is not set up properly and is preventing the user from logging in. What should you do?
Multi-factor AuthenticationMFA troubleshootingAccount accessAdmin Portal - Question #5Access Policy Management
Which statement is correct about the CyberArk Identity Windows Device Trust enrollment process?
Device Trust enrollmentendpoint configurationenrollment limitsCyberArk Identity - Question #6Access Policy Management
ACME Corporation employees access critical business web applications through CyberArk Identity. You notice a constant high volume of unauthorized traffic from 103.1.200.0/24 trying...
IP BlockingAccess ControlNetwork SecurityPolicy Configuration - Question #7Authentication and Authorization
Refer to the exhibit. Which statements are correct regarding this Authentication Policy? (Choose two.) Authentication Policy for CyberArk Identity Applies to all web logins to Cybe...
Authentication PolicyMulti-Factor AuthenticationChallenge FlowCyberArk Identity - Question #8Access Policy Management
Your organization wants to automatically create user accounts with different Salesforce licenses (e.g., Salesforce, Identity, Chatter External) in CyberArk Identity, arrange the st...
Salesforce provisioninguser lifecycle managementlicense assignmentidentity provisioning - Question #9CyberArk Access Fundamentals
Match each User Portal tab to the correct description.
User Portalportal navigationUI componentsend-user interface - Question #10Authentication and Authorization
Within the "Allow user notifications on multiple devices", if you leave the setting as Default (-), what happens if a user triggers a MFA Push notification and has enrolled three d...
MFA Push NotificationsDevice EnrollmentAuthentication SettingsDefault Configuration - Question #11Access Policy Management
An organization previously allowed users to add their personal apps on the Identity User Portal. This will soon be disabled due to policy changes. What is the impact to the users f...
Personal app managementPolicy changesIdentity User PortalAccess control - Question #12Authentication and Authorization
Which protocols can CyberArk provide MFA for VPN? (Choose two.)
MFASAMLVPN AuthenticationIdentity Protocols - Question #13Access Policy Management
Which device enrollment settings are valid? (Choose two.)
device enrollmentenrollment policiesdevice managementaccess controls - Question #14Authentication and Authorization
What is considered an "Identity Provider Initiated" login to an application?
SAMLIdentity Provider InitiatedSSOAuthentication flows - Question #15CyberArk Access Fundamentals
CyberArk Identity's App Gateway can be used to protect and access which option?
App GatewayApplication Access ControlOn-premises ProtectionIdentity Access - Question #16Authentication and Authorization
Which predefined roles does CyberArk Identity provide?
Predefined RolesRBACIdentity ManagementAccess Control - Question #17CyberArk Access Fundamentals
When configuring an application to use the App Gateway, you do not have to change any configurations in the application directly. You enable the application for App Gateway access...
App GatewayURL ConfigurationNetwork AccessInternal URL - Question #18Authentication and Authorization
What does the CyberArk Identity App Gateway work with? (Choose three.)
App GatewayAuthentication ProtocolsSAMLIdentity Integration - Question #19Authentication and Authorization
Which 2FA/MFA options can fulfill the "Something you are" requirement? (Choose two.)
2FA/MFABiometric AuthenticationAuthentication FactorsCyberArk Identity - Question #20Troubleshooting and Monitoring
Your team is deploying endpoint authentication onto the corporate endpoints within an organization. Enrollment details include when the enrollment must be completed, and the enroll...
Endpoint enrollmentEnrollment troubleshootingRemote authenticationConfiguration - Question #21Authentication and Authorization
Which options are available with Self-Service Password Reset? (Choose three.)
Self-Service Password ResetAuthenticationIdentity VerificationPassword Management - Question #22Authentication and Authorization
When can 2FA/MFA be prompted? (Choose two.)
MFA/2FAAuthentication TriggersUser Portal WorkflowsAccess Control - Question #23CyberArk Access Fundamentals
What is the purpose of the Infinite Apps feature offered by CyberArk Identity?
Infinite AppsApp CatalogUser-Password appsApp Integration - Question #24CyberArk Access Fundamentals
Which statement is true about the app gateway?
App GatewayNetwork ConnectivityConnector IntegrationFirewall Communication - Question #25Access Policy Management
When a user enrolls a mobile device (iOS or Android) without enabling mobile device management, what happens? (Choose three.)
Mobile Device EnrollmentDevice ManagementEndpoints RegistrationMDM Configuration - Question #26Authentication and Authorization
As part of compliance regulation, ACME Corporation is enforcing MFA for its critical business web-based application. To increase security and MFA compliance, CyberArk recommends se...
Multi-Factor AuthenticationAuthentication FactorsKnowledge FactorMFA Mechanisms - Question #27Authentication and Authorization
Your organization wants to limit access to the CyberArk Identity user portal to only corporate issued domain-joined laptops without the use of a VPN. How can you achieve this?
Device TrustCertificate AuthenticationAccess ControlWindows Domain Integration - Question #28Access Policy Management
What does enabling "Workflow" allow within an app connector?
Approval WorkflowsApp ConnectorsAccess ControlUser Access Requests - Question #29Authentication and Authorization
Which settings can help minimize the number of 2FA / MFA prompts? (Choose two.)
MFA/2FA reductionIP filteringChallenge Pass-ThroughAuthentication settings - Question #30Session Management
Which risk factors contribute to the user behavior risk score? (Choose two.)
User Behavior RiskGeolocation DetectionRisk ScoringSession Risk - Question #31Authentication and Authorization
Which browsers are supported for the "Land and Catch" feature? (Choose three.)
browser compatibilityLand and Catchauthenticationsystem requirements - Question #32Authentication and Authorization
You are tasked to enforce certificate based authentication onto all the domain-joined Windows machines within your organization. Based on the inventory record, there are 1000 Windo...
certificate enrollmentenrollment securityaccess controlendpoint authentication - Question #33Authentication and Authorization
This exhibit shows the base authentication policy for ACME Corporation. You must edit the policy to allow users to authenticate once if they fulfill certain authentication criteria...
Authentication Policy ConfigurationSingle Authentication MechanismChallenge ConfigurationQR Code Authentication - Question #34Reporting and Auditing
Which dashboard can display the applications launched by users, the application type, and the number of times they were launched?
Admin Portal DashboardsApplication MonitoringUser Activity AnalyticsDashboard Navigation - Question #35CyberArk Access Fundamentals
Which feature does the CyberArk Identity Connector provide?
Identity ConnectorMutual AuthenticationSaaS IntegrationSecure Communication - Question #36Authentication and Authorization
You get the following error: "Not Authorized. You do not have permission to access this feature". What is most likely the cause of the error?
AuthorizationUser PermissionsAdministrative AccessPermission Errors - Question #37Authentication and Authorization
Refer to the exhibit. How should you configure this default authentication policy to ensure users must authenticate every time they try to access the CyberArk Identity portal or we...
Authentication PolicyChallenge Pass-ThroughRe-authenticationCyberArk Identity - Question #38CyberArk Access Fundamentals
Which Custom Template app connectors are appropriate to use if a website does not require user authentication?
Custom Template ConnectorsBookmark ConnectorUnauthenticated AccessApp Integration - Question #39CyberArk Access Fundamentals
CyberArk Identity has created a CLI integration with which vendor?
CyberArk IdentityCLI IntegrationAWSVendor Integration - Question #40Authentication and Authorization
What can cause users to be prompted for unrecognized MFA factors, such as a wrong phone number or unregistered MFA factor?
MFA authenticationfactor registrationusername validationauthentication troubleshooting - Question #41Authentication and Authorization
Your Chief Executive Officer lost his phone and cannot perform MFA to log in to work. How can you enable him to bypass MFA right away and not delay his work?
MFA UnlockEmergency AccessAdmin Portal - Question #42Access Policy Management
What is the most likely reason a CyberArk Identity admin would turn on the "Provisioning" feature within a Web App connector?
User ProvisioningWeb App ConnectorUser Lifecycle ManagementIdentity Administration - Question #43Authentication and Authorization
Your organization wants to implement passwordless authentication for business critical web applications. CyberArk Identity manages access to these applications. What can you do to...
Passwordless AuthenticationCertificate-based AuthAccess PoliciesCyberArk Identity - Question #44Authentication and Authorization
Refer to the exhibit. If an Authentication Policy is configured as shown in the exhibit, which statement is correct?
Authentication PolicyMFA Challenge RoutingAccount MappingDirectory Integration - Question #45Authentication and Authorization
Cindy just joined a company's IT Audit Department and needs CyberArk Identity access to perform her daily job requirement? Which administrative right(s) should she be assigned to m...
Role-based access controlAdministrative rights assignmentCyberArk Identity rolesJob function-based access - Question #46CyberArk Access Fundamentals
Match each Web App Connector to the phrase that best describes its service offering.
web app connectorsapplication integrationSSO connectorsconnector types - Question #47Troubleshooting and Monitoring
For each statement listed, indicate if it may be a potential cause of this problem.
troubleshootingroot cause analysisproblem diagnosisissue isolation - Question #48Reporting and Auditing
You want to find all events related to the user with the login ID of "ivan.helen@acme". Which filter do you enter into the UBA portal data explorer?
UBA Data ExplorerEvent FilteringUser LookupCyberArk Field Names - Question #49Troubleshooting and Monitoring
As part of an ongoing incident investigation, you want to examine all data/events that are relevant to updating user profiles. Which dataset from the UBA portal should you use?
UBA portal datasetsConfiguration trackingUser profile auditingIncident investigation - Question #50Troubleshooting and Monitoring
What should you do if you forget your CyberArk Authenticator PIN?
PIN resetAuthenticator troubleshootingCyberArk AuthenticatorAccount recovery