When can 2FA/MFA be prompted? (Choose two.)

• A.after clicking on the Forgot Your Password link
• B.when making changes to a policy while in the Admin Portal
• C.when adding a new web app
• D.when clicking on an app file while in the User Portal
• E.when exporting a compliance report while in the Admin Portal

Comment: *

Name: *

Email: *

Verification: *

For each option listed, identify if it is a CyberArk Identity connector function.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

Which feature does the CyberArk Identity Connector provide?

• A.secured, mutually authenticated, inbound communication with CyberArk Identity SaaS
• B.SCIM server for connecting to CyberArk Vault
• C.remote access lo internal web applications
• D.web server with SAML federation to internal web applications

Comment: *

Name: *

Email: *

Verification: *

Which 2FA/MFA options can be used if users cannot use their mobile device? (Choose two.)

• A.FID02
• B.Security questions
• C.OAUTH2
• D.QRcode
• E.Push notification app

Comment: *

Name: *

Email: *

Verification: *

ACME Corporation employees access critical business web applications through CyberArk Identity. You notice a constant high volume of unauthorized traffic from 103.1.200.0/24 trying to gain access to the CyberArk Identity portal. Access to the CyberArk Identity portal is time sensitive. ACME decides to enforce IP restrictions to reduce vulnerability.
Which configuration can help achieve this?

• A.Implement device trust through the Windows Cloud Agent.
• B.Implement zero trust through the App Gateway.
• C.Login in to the CyberArk Identity Admin portal and define the IP range of 103 1 200 0/24 into the ACME Corporation IP range.
• D.Log in to the CyberArk Identity Admin portal and define the IP range of 103 1 200 0/24 into the blocked IP range.

Comment: *

Name: *

Email: *

Verification: *