CyberArk ACCESS-DEF Exam - Topic 1 Question 16 Discussion

Actual exam question for CyberArk's ACCESS-DEF exam

Question #: 16
Topic #: 1

ACME Corporation employees access critical business web applications through CyberArk Identity. You notice a constant high volume of unauthorized traffic from 103.1.200.0/24 trying to gain access to the CyberArk Identity portal. Access to the CyberArk Identity portal is time sensitive. ACME decides to enforce IP restrictions to reduce vulnerability.

Which configuration can help achieve this?

ALogin in to the CyberArk Identity Admin portal and define the IP range of 103 1 200 0/24 into the ACME Corporation IP range.

BLog in to the CyberArk Identity Admin portal and define the IP range of 103 1 200 0/24 into the blocked IP range.

CImplement device trust through the Windows Cloud Agent.

DImplement zero trust through the App Gateway.

Show Suggested Answer

Suggested Answer: B

by Lonny at Jul 15, 2024, 04:50 PM

Limited Time Offer

25%

Off

Get Premium ACCESS-DEF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alisha

3 months ago

B is the best option here, no doubt about it!

upvoted 0 times

...

Dustin

3 months ago

Zero trust sounds cool, but not for this situation.

upvoted 0 times

...

Donte

4 months ago

Wait, are we sure that IP range is really the source?

upvoted 0 times

...

Shannon

4 months ago

I think A could work too, but blocking is safer.

upvoted 0 times

...

Lisbeth

4 months ago

Definitely B, blocking that IP range is the way to go.

upvoted 0 times

...

Van

4 months ago

I think implementing device trust could be a good strategy, but it seems like we need a more immediate solution for the unauthorized traffic.

upvoted 0 times

...

Chauncey

4 months ago

I feel like we might need to consider the implications of blocking an entire range. What if there are legitimate users in that range?

upvoted 0 times

...

Gracie

5 months ago

This reminds me of a practice question where we had to block an IP range. I think option B makes sense since we want to prevent unauthorized access.

upvoted 0 times

...

Lindy

5 months ago

I remember we discussed IP restrictions in class, but I'm not sure if we should block the entire range or just specific addresses.

upvoted 0 times

...

Tien

5 months ago

This is a good one. I like how it's testing our understanding of CyberArk Identity and IP management. I'm confident that option B is the right answer here, as it directly addresses the issue of unauthorized traffic from the specified IP range.

upvoted 0 times

...

Hoa

5 months ago

Okay, I've got this. The question is asking us to reduce vulnerability, so the best approach is to block the problematic IP range in the CyberArk Identity admin portal. That's option B, so I'm going with that.

upvoted 0 times

...

Aja

5 months ago

Hmm, I'm a bit confused about the different options here. I'm not sure if I should be defining the IP range as part of the ACME Corporation IP range or as a blocked IP range. I'll need to think this through carefully.

upvoted 0 times

...

Kiera

5 months ago

This seems like a straightforward question about configuring IP restrictions in CyberArk Identity. I think the key is to identify the correct way to block the specific IP range that's causing the unauthorized traffic.

upvoted 0 times

...

Emerson

5 months ago

I'm not sure about the device trust or zero trust options. Those seem like they might be overkill for this specific scenario. I think the IP blocking approach is the most straightforward and effective solution.

upvoted 0 times

...

Eveline

5 months ago

Hmm, I'm a bit unsure about this one. The options seem to cover different aspects of security, but I'm not sure which one specifically addresses Zero Trust. I'll need to think this through carefully.

upvoted 0 times

...

Dean

5 months ago

Hmm, this looks like a tricky one. I'll need to think through the principles of least privilege and how to set up the Stackdriver Workspaces effectively.

upvoted 0 times

...

Anika

10 months ago

Seriously, ACME? This has to be a trick question. I'm going to put on my Wile E. Coyote thinking cap and choose option B. Blocking those sneaky IPs is the way to go.

upvoted 0 times

Azzie

9 months ago

User 3: Definitely, we can't let those unauthorized traffic keep trying to gain access. Option B it is.

upvoted 0 times

...

Alona

9 months ago

User 2: I think so too. It's important to take action to protect the CyberArk Identity portal.

upvoted 0 times

...

Ciara

9 months ago

User1: Definitely, we need to take action to secure our critical business web applications.

upvoted 0 times

...

Cristina

9 months ago

User2: I think so too. It's important to protect the CyberArk Identity portal from potential threats.

upvoted 0 times

...

Carissa

10 months ago

User1: I agree, option B seems like the best choice to block those unauthorized IPs.

upvoted 0 times

...

Colton

10 months ago

User 1: I agree, option B seems like the best choice. Blocking those unauthorized IPs is crucial.

upvoted 0 times

...

Derick

10 months ago

This question is as clear as mud. I'm just going to choose option A and hope for the best. Maybe ACME can give me a free anvil if I get it right.

upvoted 0 times

...

Dominga

10 months ago

Hmm, I'm not sure if the 'Acme Corporation' is a real company or just a reference to the classic cartoons. Either way, I'm going with option D. Can't go wrong with zero trust, right?

upvoted 0 times

...

Lizbeth

10 months ago

Wait, are we supposed to trust the 'ACME Corporation' with their web applications? This sounds like a trap from the Looney Tunes gang. I'm going with option C just to be safe.

upvoted 0 times

Darell

9 months ago

User4: Good call, better safe than sorry.

upvoted 0 times

...

Martina

9 months ago

User3: Yeah, let's go with implementing device trust through the Windows Cloud Agent.

upvoted 0 times

...

Alpha

9 months ago

User2: I think option C is the safest bet.

upvoted 0 times

...

Kami

10 months ago

User1: I agree, ACME Corporation sounds sketchy.

upvoted 0 times

...

Jesus

10 months ago

Finally, a question that makes sense! I think option B is the way to go. Blocking the suspicious IP range is the quickest and most effective way to secure the CyberArk Identity portal.

upvoted 0 times

...