CyberArk ACCESS-DEF Exam - Topic 2 Question 33 Discussion

Actual exam question for CyberArk's ACCESS-DEF exam

Question #: 33
Topic #: 2

Refer to the exhibit.

This exhibit shows the base authentication policy for ACME Corporation. You must edit the policy to allow users to authenticate once if they fulfill certain authentication criteria.

How should you configure this policy to support BOTH?

AConfigure 'Challenge Pass-Through Duration' to be 'always'.

BConfigure FID02 authenticator as Challenge 1.

CConfigure FID02 authenticator as Challenge 2.

DConfigure QR Code as 'Single Authentication Mechanism'.

Show Suggested Answer

Suggested Answer: D

by Val at Apr 08, 2025, 10:21 PM

Limited Time Offer

25%

Off

Get Premium ACCESS-DEF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Leslee

5 months ago

Wait, QR Code as a single mechanism? That sounds sketchy!

upvoted 0 times

...

Yun

5 months ago

B could work too, but A feels more straightforward.

upvoted 0 times

...

Davida

5 months ago

I think option A makes the most sense for continuous access.

upvoted 0 times

...

Lindsey

6 months ago

Not so sure about A, seems risky to have it set to 'always'.

upvoted 0 times

...

Leatha

6 months ago

Definitely agree with A, it allows for seamless user experience.

upvoted 0 times

...

Vallie

6 months ago

I feel like configuring FID02 as Challenge 2 might be the way to go, but I need to double-check how that interacts with the overall policy.

upvoted 0 times

...

Bettina

6 months ago

I vaguely remember something about QR Codes being used as a single authentication method, but I'm not confident if that's the best choice for this scenario.

upvoted 0 times

...

Bea

7 months ago

I think we had a similar question about configuring authenticators, and I feel like Challenge 1 is usually the primary one, but I can't recall the specifics for FID02.

upvoted 0 times

...

Christoper

7 months ago

I remember we discussed how 'Challenge Pass-Through Duration' could impact user experience, but I'm not sure if 'always' is the right setting here.

upvoted 0 times

...

Adolph

7 months ago

This seems straightforward enough. I'll go with option C - configuring FID02 as the second challenge. That should meet the requirements while keeping the policy simple.

upvoted 0 times

...

Chauncey

7 months ago

I'm a bit confused by the wording of the question. Do I need to configure the policy to allow single authentication, or is there something else I'm missing? I'll re-read it carefully.

upvoted 0 times

...

Kaycee

7 months ago

Ah, I see what they're asking for. I think option B might be the way to go, but I'll double-check the policy requirements to be sure.

upvoted 0 times

...

Francine

8 months ago

Okay, let me think this through step-by-step. I need to find a way to allow users to authenticate once while still meeting the criteria. I'll have to weigh the pros and cons of each option.

upvoted 0 times

...

Alise

8 months ago

Hmm, this looks like a tricky one. I'll need to carefully analyze the policy details and the options provided to determine the best approach.

upvoted 0 times

...

Truman

1 year ago

This is a real brain-teaser, I tell ya. But I reckon option C is the way to go - FID02 as the second challenge, that's the ticket! Keeps things interesting, you know?

upvoted 0 times

...

Dawne

1 year ago

Oh, I don't know. Option A seems like it could be the answer - setting the 'Challenge Pass-Through Duration' to 'always' might be the way to go. Gotta cover all our bases, right?

upvoted 0 times

...

Glenna

1 year ago

Haha, this question is a real head-scratcher! I'm gonna have to go with option D and configure the QR code as the single authentication mechanism. Keeps things simple, you know?

upvoted 0 times