Pass Your Exam With 100% Verified ACCESS-DEF Exam Questions [Q18-Q35]

Rate this post

Pass Your Exam With 100% Verified ACCESS-DEF Exam Questions

ACCESS-DEF Dumps PDF – ACCESS-DEF Real Exam Questions Answers

Q18. What can cause users to be prompted for unrecognized MFA factors, such as a wrong phone number or unregistered MFA factor?

Someone installed the CyberArk Identity mobile app on a different phone with their credentials.

The administrator switched authentication profiles.

They mistyped their username.

Someone registered their phone number to the wrong username.

Q19. Which statement is true about the app gateway?

For applications that use the App Gateway, the connection from the user travels the same network pathways you already have and CyberArk Identity connects to the CyberArk Identity Connector through the firewall.

For applications that use the App Gateway, the connection from the user travels different network pathways and CyberArk Identity connects to the CyberArk Identity Connector through a separate connection from the firewall.

On the App Gateway page, you can configure the application to enable users to access it if they are logging in from an external location.

App gateway supports on-premises apps and web applications running on HTTPS only.

Q20. ACME Corporation employees access critical business web applications through CyberArk Identity. You notice a constant high volume of unauthorized traffic from 103.1.200.0/24 trying to gain access to the CyberArk Identity portal. Access to the CyberArk Identity portal is time sensitive. ACME decides to enforce IP restrictions to reduce vulnerability.
Which configuration can help achieve this?

Login in to the CyberArk Identity Admin portal and define the IP range of 103 1 200 0/24 into the ACME Corporation IP range.

Implement device trust through the Windows Cloud Agent.

Implement zero trust through the App Gateway.

Q21. Which feature does the CyberArk Identity Connector provide?

web server with SAML federation to internal web applications

secured, mutually authenticated, inbound communication with CyberArk Identity SaaS

SCIM server for connecting to CyberArk Vault

remote access lo internal web applications

Q22. Refer to the exhibit.
Within the “Allow user notifications on multiple devices”, if you leave the setting as Default (–), what happens if a user triggers a MFA Push notification and has enrolled three different devices?

The push notification will be sent to none of the enrolled devices.

The push notification will be sent to the first enrolled device only.

The push notification will be sent to all enrolled devices.

The push notification will be sent to the last enrolled device only.

Q23. What is considered an “Identity Provider Initiated” login to an application?

After signing in to the CyberArk Identity portal, a user launches a SAML app by clicking an app tile.

After visiting a third-party web app, a user is redirected to CyberArk Identity for authentication.

A user visits a third party web app directly and signs in with local credentials.

A user signs in to the CyberArk Identity portal and takes a screenshot of the portal to send to IT.

Q24. What should you do if you forget your CyberArk Authenticator PIN?

Click on the Reset PIN code button.

Submit a support case to request a new PIN.

Contact the Administrator to unlock the CvberArk Authenticator.

Reinstall CyberArk Authenticator on top of the existing installation.

Q25. Which 2FA/MFA options can be used if users cannot use their mobile device? (Choose two.)

FID02

Security questions

OAUTH2

QRcode

Push notification app

Q26. Which administrative right is required to manually start a provisioning synchronization job?

Application Management

User Management

System Enrollment

Q27. For each option listed, identify if it is a CyberArk Identity connector function.

Q28. Which protocols can CyberArk provide MFA for VPN? (Choose two.)

SAML

RADIUS

IMAP

TACACS

LDAP

Q29. Refer to the exhibit.
Which statement is correct about this configuration shown?

Users are allowed to answer security questions as part of the multi-factor authentication process.

There is no requirement to configure at least one user-defined question.

You can choose to answer at least one admin-defined question.

It is optional to keep the minimum number of characters required in answers to three.

Q30. What is the purpose of the Infinite Apps feature offered by CyberArk Identity?

It provides an easy way to find all the SAML-enabled apps that exist online.

It automatically downloads the desktop version of all your web apps.

It provides the ability to launch apps in any web browser

If facilitates adding User-Password web apps not in the CyberArk Identity App Catalog.

Q31. A user’s account information required for multi-factor authentication is not set up properly and is preventing the user from logging in.
What should you do?

Use the MFA Unlock command in the Admin Portal to suspend multifactor authentication for 10 minutes.

Delete the user’s account and create a new one.

Ask the user to delete all browser cookies, then try again.

Change the user’s director/ source from Active Directory to LDAP for authentication.

Q32. Your organization wants to automatically create user accounts with different Salesforce licenses (e.g., Salesforce, Identity, Chatter External).
In CyberArk Identity, arrange the steps to achieve this in the correct sequence.

Q33. Within a Web App connector, which feature does an admin use to grant users access?

Trust

Workflow

Provisioning

Permissions

Q34. Which HR system supports synchronization to both Active Directory and CyberArk Identity Cloud Directory?

BambooHR

Workday

SAP SuccessFactors

Prosoft HRMS (Unit4)

Q35. As part of compliance regulation, ACME Corporation is enforcing MFA for its critical business web-based application. To increase security and MFA compliance, CyberArk recommends selecting mechanisms from different categories. Within the authentication policy, ACME Corporation made the requirement to configure an authentication mechanism with “Something you know”.
Which authentication mechanism meets this requirement?

Phone Call

Security Question

Text Message (SMS) Confirmation Code

FID02 Authenticators

Loading …