CyberArk ACCESS-DEF 問題集

質問 1：
Where can you download the CyberArk Identity mobile app? (Choose two.)
A. Apple Agp Store
B. email attachment
C. Support portal
D. Download section of the Admin Portal
E. Google Play Store
正解：A,E

質問 2：
An organization previously allowed users to add their personal apps on the Identity User Portal. This will soon be disabled due to policy changes.
What is the impact to the users for personal apps previously added to the User Portal?
A. They will continue to display on the Apps screen and user devices; however, an error message will display when users try to open the application.
B. They will be deleted from the Apps screen and user devices.
C. They will continue to function normally; however, users cannot add new apps.
D. They will continue to display on the Apps screen and user devices; however, they will be greyed out and unavailable for any form of interaction.
正解：A

質問 3：
Refer to the exhibit.
Which statements are correct regarding this Authentication Policy? (Choose two.)

A. Users will still be asked for their MFA even if they mistyped their username.
B. Users will not be notified which challenge they failed if their login attempt failed.
C. If users have set up CyberArk Mobile Authenticator as an MFA, they will still receive the Push Notification to confirm the request even if they mistyped their password.
D. If the first factor is password and the user is an Active Directory user and the Active Directory is unavailable, this setting does not matter because the user will not be able to authenticate through Active Directory credentials and will see the message "Active Directory not available".
E. If users have set up a Security Question as an MFA, the Security Question will not be displayed to the user to answer even if they mistyped their password.
正解：B,C

質問 4：
Admins can enable self-service for users to unlock their accounts. There are four options under the Admin Portal Core Services > Policies > User Security Policies > Self Service > Account Unlock options.
Match each option to the correct description.

正解：


質問 5：
A user's account information required for multi-factor authentication is not set up properly and is preventing the user from logging in.
What should you do?
A. Delete the user's account and create a new one.
B. Ask the user to delete all browser cookies, then try again.
C. Change the user's director/ source from Active Directory to LDAP for authentication.
D. Use the MFA Unlock command in the Admin Portal to suspend multifactor authentication for 10 minutes.
正解：D

質問 6：
Refer to the exhibit.
Which statement is correct about this configuration shown?

A. Users are allowed to answer security questions as part of the multi-factor authentication process.
B. It is optional to keep the minimum number of characters required in answers to three.
C. There is no requirement to configure at least one user-defined question.
D. You can choose to answer at least one admin-defined question.
正解：A