ACCESS-DEFPreview

Which 2FA/MFA options can be used if users cannot use their mobile device? (Choose two.)

A user's account information required for multi-factor authentication is not set up properly and is preventing the user from logging in.
What should you do?

Which statement is correct about the CyberArk Identity Windows Device Trust enrollment process?

DRAG DROP -
A user wants to install the CyberArk Identity mobile app by using a QR code.
Arrange the steps to do this in the correct sequence.

ACME Corporation employees access critical business web applications through CyberArk Identity. You notice a constant high volume of unauthorized traffic from 103.1.200.0/24 trying to gain access to the CyberArk Identity portal. Access to the CyberArk Identity portal is time sensitive. ACME decides to enforce IP restrictions to reduce vulnerability.
Which configuration can help achieve this?

Refer to the exhibit.
Which statements are correct regarding this Authentication Policy? (Choose two.)

An organization previously allowed users to add their personal apps on the Identity User Portal. This will soon be disabled due to policy changes.
What is the impact to the users for personal apps previously added to the User Portal?

Refer to the exhibit.
Within the "Allow user notifications on multiple devices", if you leave the setting as Default (--), what happens if a user triggers a MFA Push notification and has enrolled three different devices?

Which protocols can CyberArk provide MFA for VPN? (Choose two.)

DRAG DROP -
Your organization wants to automatically create user accounts with different Salesforce licenses (e.g., Salesforce, Identity, Chatter External).
In CyberArk Identity, arrange the steps to achieve this in the correct sequence.

Which device enrollment settings are valid? (Choose two.)

What is considered an "Identity Provider Initiated" login to an application?

CyberArk Identity's App Gateway can be used to protect and access which option?

Which predefined roles does CyberArk Identity provide?

When configuring an application to use the App Gateway, you do not have to change any configurations in the application directly. You enable the application for App Gateway access in the Admin Portal and input the existing URL that users enter to open the application. You can either use an external URL that CyberArk Identity automatically generates, or you can continue using an existing internal URL.
What is a disadvantage of using an existing internal URL for App Gateway connections?

What does the CyberArk Identity App Gateway work with? (Choose three.)

Which 2FA/MFA options can fulfill the "Something you are" requirement? (Choose two.)

Your team is deploying endpoint authentication onto the corporate endpoints within an organization. Enrollment details include when the enrollment must be completed, and the enrollment code was sent out to the users. Enrollment can be performed in the office or remotely (without the assistance of an IT support engineer). You received feedback that many users are unable to enroll into the system using the enrollment code.
What can you do to resolve this? (Choose two.)

Which options are available with Self-Service Password Reset? (Choose three.)

When can 2FA/MFA be prompted? (Choose two.)

What is the purpose of the Infinite Apps feature offered by CyberArk Identity?

Which statement is true about the app gateway?

When a user enrolls a mobile device (iOS or Android) without enabling mobile device management, what happens? (Choose three.)

As part of compliance regulation, ACME Corporation is enforcing MFA for its critical business web-based application. To increase security and MFA compliance, CyberArk recommends selecting mechanisms from different categories. Within the authentication policy, ACME Corporation made the requirement to configure an authentication mechanism with "Something you know".
Which authentication mechanism meets this requirement?