CyberArk Defender Access 認定 ACCESS-DEF 試験問題:
1. ACME Corporation employees access critical business web applications through CyberArk Identity. You notice a constant high volume of unauthorized traffic from 103.1.200.0/24 trying to gain access to the CyberArk Identity portal. Access to the CyberArk Identity portal is time sensitive. ACME decides to enforce IP restrictions to reduce vulnerability.
Which configuration can help achieve this?
A) Login in to the CyberArk Identity Admin portal and define the IP range of 103 1 200 0/24 into the ACME Corporation IP range.
B) Implement device trust through the Windows Cloud Agent.
C) Implement zero trust through the App Gateway.
D) Log in to the CyberArk Identity Admin portal and define the IP range of 103 1 200 0/24 into the blocked IP range.
2. Within a Web App connector, which feature does an admin use to grant users access?
A) Trust
B) Provisioning
C) Permissions
D) Workflow
3. A user's account information required for multi-factor authentication is not set up properly and is preventing the user from logging in.
What should you do?
A) Delete the user's account and create a new one.
B) Change the user's director/ source from Active Directory to LDAP for authentication.
C) Use the MFA Unlock command in the Admin Portal to suspend multifactor authentication for 10 minutes.
D) Ask the user to delete all browser cookies, then try again.
4. You are tasked to enforce certificate based authentication onto all the domain-joined Windows machines within your organization. Based on the inventory record, there are 1000 Windows machines, which include 150 standalone Windows machines. The enrollment will be conducted from either the office network or through the Virtual Private Network (VPN).
Which parameter(s) should you define within the enrollment code to ensure the security of the code and that only the authorized endpoints get registered?
A) Define the enrollment code to only the specific office/VPN IP network segment.
B) Specify the maximum number of devices that can be enrolled.
C) Set an expiration date defining when the code should expire.
D) Define that only Linux machines may be enrolled.
5. An organization previously allowed users to add their personal apps on the Identity User Portal. This will soon be disabled due to policy changes.
What is the impact to the users for personal apps previously added to the User Portal?
A) They will continue to function normally; however, users cannot add new apps.
B) They will be deleted from the Apps screen and user devices.
C) They will continue to display on the Apps screen and user devices; however, they will be greyed out and unavailable for any form of interaction.
D) They will continue to display on the Apps screen and user devices; however, an error message will display when users try to open the application.
質問と回答：
| 質問 # 1 正解： D | 質問 # 2 正解： B | 質問 # 3 正解： C | 質問 # 4 正解： A、C | 質問 # 5 正解： D |
1151 お客様のコメント
品質保証JPexamはIT認定試験のシラバスに従って、試験問題の範囲を正確に絞って、的中率が99％の最新問題集を捧げます。
1年間の無料更新サービスJPexamは1年以内に問題集の無料更新サービスを提供し、お客様がいつでも最新版の問題集を持つことを保証いたします。もし試験の内容が変更されたら、弊社は直ちにお客様にお知らせします。それに、弊社の問題集が更新されたら、早速メールで最新バージョンを送付いたします。
全額返金JPexamの問題集を利用すると、短時間で勉強しても試験に合格できるのを保証いたします。試験に不合格になってしまった場合、弊社は全額返金いたします。(
ご購入前のお試しJPexamは問題集のサンプルを無料で提供いたします。ご購入前にサンプルを試用して製品の品質を確認することができます。ご遠慮なく利用してください。
