CyberArk ACCESS-DEF Quiz 1 Topic 1 Questions 1-5

Question: 1

Refer to the exhibit.

Which statements are correct regarding this Authentication Policy? (Choose two.)

q1_ACCESS-DEF

AUsers will still be asked for their MFA even if they mistyped their username.

BIf users have set up CyberArk Mobile Authenticator as an MFA, they will still receive the Push Notification to confirm the request even if they mistyped their password.

CUsers will not be notified which challenge they failed if their login attempt failed.

DIf users have set up a Security Question as an MFA, the Security Question will not be displayed to the user to answer even if they mistyped their password.

EIf the first factor is password and the user is an Active Directory user and the Active Directory is unavailable, this setting does not matter because the user will not be able to authenticate through Active Directory credentials and will see the message 'Active Directory not available'.

Show Answer

Question: 2

When logging on to the User Portal, which authentication methods can enable the user to bypass authentication rules and default profile? (Choose two.)

ACertification-Based Authentication (CBA)

BIntegrated Windows Authentication (IWA)

CQR Code Authentication

DFIDO2 Authentication

ERADIUS Authentication

Show Answer

Question: 3

You are tasked to enforce certificate based authentication onto all the domain-joined Windows machines within your organization. Based on the inventory record, there are 1000 Windows machines, which include 150 standalone Windows machines. The enrollment will be conducted from either the office network or through the Virtual Private Network (VPN).

Which parameter(s) should you define within the enrollment code to ensure the security of the code and that only the authorized endpoints get registered?

ASet an expiration date defining when the code should expire.

BSpecify the maximum number of devices that can be enrolled.

CDefine the enrollment code to only the specific office/VPN IP network segment.

DDefine that only Linux machines may be enrolled.

Show Answer

Question: 4

What is the purpose of the Infinite Apps feature offered by CyberArk Identity?

AIt provides an easy way to find all the SAML-enabled apps that exist online.

BIt automatically downloads the desktop version of all your web apps.

CIt provides the ability to launch apps in any web browser

DIf facilitates adding User-Password web apps not in the CyberArk Identity App Catalog.

Show Answer

Question: 5

Refer to the exhibit.

If an Authentication Policy is configured as shown in the exhibit, which statement is correct?

q5_ACCESS-DEF

AThe Initial MFA challenge will be sent to the account in CyberArk Cloud Directory (Tarqet).

BUpon successful logon, the user will be logged in as the account in CyberArJS Cloud Directory (Target).

CFuture MFA challenges will be sent to the account in AD (Source).

DIf there is no matching email between two accounts in AD (Source) and CyberArt Cloud Directory (Target), the mapping will then look for a matching User ID.

Show Answer

CyberArk ACCESS-DEF Quiz:1 Topic:1 Questions:1-5