CyberArk ACCESS-DEF Exam Questions Instant Access

Question 1

Which options are available with Self-Service Password Reset? (Choose three.)

AEnable users with Active Directory accounts who have forgotten their password to log in and reset it.

BPerform Self-Service Password Reset for the Organization's corporate accounts, such as Twitter, Facebook, or Instagram.

CUsers must log in after a password reset.

DA maximum number of times can be specified that users can reset their password within a specific timeframe.

EUsers must respond to a CAPTCHA before resetting their password.

FUse Helpdesk Caller Identity (Identity Verification) to confirm user identity.

Answer : A, D, E

Question 2

Which 2FA/MFA options can fulfill the "Something you are" requirement? (Choose two.)

Aemail

BCyberArk Identity mobile app

CF1D02

Dphone call

Esecurity questions

Answer : B, C

Question 3

You are tasked to enforce certificate based authentication onto all the domain-joined Windows machines within your organization. Based on the inventory record, there are 1000 Windows machines, which include 150 standalone Windows machines. The enrollment will be conducted from either the office network or through the Virtual Private Network (VPN).

Which parameter(s) should you define within the enrollment code to ensure the security of the code and that only the authorized endpoints get registered?

ASet an expiration date defining when the code should expire.

BSpecify the maximum number of devices that can be enrolled.

CDefine the enrollment code to only the specific office/VPN IP network segment.

DDefine that only Linux machines may be enrolled.

Answer : A, C

Question 4

What is the purpose of the Infinite Apps feature offered by CyberArk Identity?

AIt provides an easy way to find all the SAML-enabled apps that exist online.

BIt automatically downloads the desktop version of all your web apps.

CIt provides the ability to launch apps in any web browser

DIf facilitates adding User-Password web apps not in the CyberArk Identity App Catalog.

Answer : D

Question 5

What does the CyberArk Identity App Gateway work with? (Choose three.)

ASAML-Compliant Apps

BWS-Fed Enabled Apps

COIDC Web Apps

DThick Client (non-web-based Apps)

ETerminal Services

FTelnet

Answer : A, B, C

Question 6

What can cause users to be prompted for unrecognized MFA factors, such as a wrong phone number or unregistered MFA factor?

ASomeone installed the CyberArk Identity mobile app on a different phone with their credentials.

BThe administrator switched authentication profiles.

CThey mistyped their username.

DSomeone registered their phone number to the wrong username.

Answer : C

Question 7

Refer to the exhibit.

Within the "Allow user notifications on multiple devices", if you leave the setting as Default (--), what happens if a user triggers a MFA Push notification and has enrolled three different devices?

AThe push notification will be sent to none of the enrolled devices.

BThe push notification will be sent to the first enrolled device only.

CThe push notification will be sent to all enrolled devices.

DThe push notification will be sent to the last enrolled device only.

Answer : B

CyberArk Defender Access ACCESS-DEF Exam Questions