MENU
Your organization wants to limit access to the CyberArk Identity user portal to only corporate issued domain-joined laptops without the use of a VPN.
How can you achieve this?
Suggested Answer: B, D
Get Premium ACCESS-DEF Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
32 comments · newest first
OR
Ora
11 months ago
D is interesting, but I doubt it’s the right fit here.
HI
Hillary
11 months ago
Wait, can we really restrict access without a VPN?
AD
Adrianna
11 months ago
C seems risky, what if someone spoofs an IP?
HI
Hildred
11 months ago
I think B could work too, but not as secure.
AL
Alyssa
12 months ago
A is the best option for device trust!
TE
Terrilyn
12 months ago
I don't remember much about option D with Conjur. Wasn't that more about secrets management? It doesn't seem to fit this scenario.
AY
Ayesha
1 year ago
I recall discussing IP address restrictions in class, so option C might be a possibility, but it seems less secure than the others.
LI
Lilli
1 year ago
I'm not entirely sure, but I feel like option B could work too. Integrated Windows Authentication was mentioned in some practice questions we did.
DE
Deeann
1 year ago
I think option A sounds familiar, especially with the Device Trust agent. I remember something about certificate-based authentication being secure.
LA
Lawrence
1 year ago
This is a tricky one. I'm not super familiar with all the CyberArk Identity features, so I'll need to do some research on the differences between the options. Gotta make sure I pick the right solution.
JO
Josephine
1 year ago
Okay, I've got a plan. I'll focus on the requirement to limit access to domain-joined laptops without a VPN. That points me towards the Windows Device Trust agent with certificate-based auth in option A.
PA
Pansy
1 year ago
Hmm, I'm a bit confused by the different options here. I'm not sure if the Windows Cloud Agent or Conjur integration are the right fit for this scenario. I'll need to review the details more carefully.
VI
Vivienne
1 year ago
This seems like a straightforward question about device authentication. I think option A using the Windows Device Trust agent is the way to go.
BR
Britt
1 year ago
I think this is a tricky one, but I'm going to give it my best shot. Let me re-read the question carefully and think through the key points.
DO
Domonique
1 year ago
I've got this one! The answer is A. I remember the instructor mentioning that you can set the "Maximum Entries in Dropdowns" field to # to always use popup lists instead of dropdowns. That's a handy tip to know for the exam.
MI
Milly
1 year ago
Option B it is! Windows authentication, the corporate way to keep the hackers at bay. Now, where did I put my domain admin credentials again?
CO
Corazon
1 year ago
User 3: Make sure to keep your domain admin credentials safe and secure!
ME
Melissa
1 year ago
User 2: I agree, it's a secure way to limit access to the user portal.
MA
Madonna
1 year ago
User 1: Option B it is! Windows authentication, the corporate way to keep the hackers at bay.
SA
Samuel
1 year ago
Ah, corporate laptops and security, the never-ending dance. At least they're not asking us to use a VPN, that would be too easy!
LA
Lauryn
1 year ago
Hmm, the Conjur integration, huh? Sounds like a magic trick to me. I'll stick with the classic Windows Cloud Agent approach.
RO
Roslyn
2 years ago
I'm not sure, but I think option C) Define a range of internal corporate IP addresses could also work to restrict access.
GL
Glenna
2 years ago
I'm not sure about using a range of internal IP addresses, that could get messy. The certificate-based authentication with the Windows Device Trust agent sounds cleaner to me.
PA
Paola
1 year ago
User 2
LA
Layla
1 year ago
The certificate-based authentication with the Windows Device Trust agent sounds cleaner to me.
AL
Alaine
1 year ago
User 1
LA
Latonia
1 year ago
I'm not sure about using a range of internal IP addresses, that could get messy.
ST
Stephaine
1 year ago
B) Use the Windows Cloud Agent and CyberArk Identity Connector with Integrated Windows Authentication
DI
Dierdre
1 year ago
A) Use the Windows Device Trust agent with certificate-based authentication.
FE
Felicitas
2 years ago
I agree with Dyan, using certificate-based authentication is a secure way to limit access to the user portal.
EL
Ellsworth
2 years ago
Option B seems like the way to go here. The Windows Cloud Agent and CyberArk Identity Connector with Integrated Windows Authentication should do the trick.
DY
Dyan
2 years ago
I think the answer is A) Use the Windows Device Trust agent with certificate-based authentication.