Online Access Free ACCESS-DEF Practice Test

When configuring an application to use the App Gateway, you do not have to change any configurations in the application directly. You enable the application for App Gateway access in the Admin Portal and input the existing URL that users enter to open the application. You can either use an external URL that CyberArk Identity automatically generates, or you can continue using an existing internal URL.
What is a disadvantage of using an existing internal URL for App Gateway connections?

• A.Existing links and bookmarks do not work outside of the corporate network.
• B.More configuration is needed because you must upload the URL certificate and private key, and edit DNS settings.
• C.Users must use the same URLs regardless of whether they access the application internally or externally and this may confuse them.
• D.Users must use different URLs depending on whether they access the application internally or externally.

A user wants to install the CyberArk Identity mobile app by using a QR code.
Arrange the steps to do this in the correct sequence.

Correct Answer:

Which 2FA/MFA options can be used if users cannot use their mobile device? (Choose two.)

• A.Push notification app
• B.QRcode
• C.FID02
• D.Security questions
• E.OAUTH2

Which protocols can CyberArk provide MFA for VPN? (Choose two.)

• A.SAML
• B.TACACS
• C.IMAP
• D.LDAP
• E.RADIUS

ACME Corporation employees access critical business web applications through CyberArk Identity. You notice a constant high volume of unauthorized traffic from 103.1.200.0/24 trying to gain access to the CyberArk Identity portal. Access to the CyberArk Identity portal is time sensitive. ACME decides to enforce IP restrictions to reduce vulnerability.
Which configuration can help achieve this?

• A.Implement device trust through the Windows Cloud Agent.
• B.Login in to the CyberArk Identity Admin portal and define the IP range of 103 1 200 0/24 into the ACME Corporation IP range.
• C.Implement zero trust through the App Gateway.
• D.Log in to the CyberArk Identity Admin portal and define the IP range of 103 1 200 0/24 into the blocked IP range.