Free CyberArk Defender Access Exam ACCESS-DEF Exam Practice Test

A user's account information required for multi-factor authentication is not set up properly and is preventing the user from logging in.What should you do?

• Use the MFA Unlock command in the Admin Portal to suspend multifactor authentication for 10 minutes.
• Delete the user's account and create a new one.
• Ask the user to delete all browser cookies, then try again.
• Change the user's director/ source from Active Directory to LDAP for authentication.

When a user enrolls a mobile device (iOS or Android) without enabling mobile device management, what happens? (Choose three.)

• The device is added to the Endpoints page in the Admin and User portals.
• The web applications assigned to the user are added to the Web Apps screen in the CyberArk Identity mobile app.
• The associated mobile applications are added and available for deployment automatically.
• The mobile device policies defined in the CyberArk Cloud Directory policy service policy set are installed.
• The device's model name, serial number. OS number, and Network Carrier information will be uploaded to the Identity portal.
• The mobile phone can now be used as a MFA Authentication Factor

Which administrative right is required to manually start a provisioning synchronization job?

• Application Management
• User Management
• System Enrollment
• Register and Administer connectors

On which operating systems can the CyberArk Authenticator desktop application be installed? (Choose two.)

• OS
• Windows 10
• Ubuntu
• MacOS
• Android

Which HR system supports synchronization to both Active Directory and CyberArk Identity Cloud Directory?

• BambooHR
• Workday
• SAP SuccessFactors
• Prosoft HRMS (Unit4)

Which statement is correct about the CyberArk Identity Windows Device Trust enrollment process?

• An enrollment code is optional.
• The endpoint does not need to be a domain-joined machine.
• You can define the maximum number of joinable endpoints.
• You can define the minimum number of joinable endpoints.

An organization previously allowed users to add their personal apps on the Identity User Portal. This will soon be disabled due to policy changes.What is the impact to the users for personal apps previously added to the User Portal?

• They will continue to function normally; however, users cannot add new apps.
• They will continue to display on the Apps screen and user devices; however, they will be greyed out and unavailable for any form of interaction.
• They will be deleted from the Apps screen and user devices.
• They will continue to display on the Apps screen and user devices; however, an error message will display when users try to open the application.

You are tasked to enforce certificate based authentication onto all the domain-joined Windows machines within your organization. Based on the inventory record, there are 1000 Windows machines, which include 150 standalone Windows machines. The enrollment will be conducted from either the office network or through the Virtual Private Network (VPN).Which parameter(s) should you define within the enrollment code to ensure the security of the code and that only the authorized endpoints get registered?

• Set an expiration date defining when the code should expire.
• Specify the maximum number of devices that can be enrolled.
• Define the enrollment code to only the specific office/VPN IP network segment.
• Define that only Linux machines may be enrolled.

What is the most likely reason a CyberArk Identity admin would turn on the "Provisioning" feature within a Web App connector?

• to ensure users are automatically on-boarded and off-boarded in a third-party application
• to ensure users are provisioned with the appropriate devices when they start
• to ensure the web app appears in the users' CyberArk Identity portal when they first sign in
• to create an audit log of every time users sign into the web app

You get the following error: "Not Authorized. You do not have permission to access this feature". What is most likely the cause of the error?

• A user tried to sign in to the wrong identity tenant.
• A user tried to sign in before being created in Active Directory.
• A user gave someone else access to his/her laptop.
• A non-administrative user tried to access an administrative feature.