Examice

Exam ACCESS-DEF All QuestionsBrowse all questions from this exam

Question 45

Refer to the exhibit.

If an Authentication Policy is configured as shown in the exhibit, which statement is correct?

The Initial MFA challenge will be sent to the account in CyberArk Cloud Directory (Target).

Upon successful logon, the user will be logged in as the account in CyberArk Cloud Directory (Target).

Future MFA challenges will be sent to the account in AD (Source).

If there is no matching email between two accounts in AD (Source) and CyberArk Cloud Directory (Target), the mapping will then look for a matching User ID.

Correct Answer: A

The settings shown in the exhibit indicate that local account linking is set to map user accounts between two directory services: the source directory service (AD: CYBR.COM) and the target directory service (CyberArk Cloud Directory). The directory user mapping attribute is set to 'Email' and the check box 'Use this mapping only for MFA re-direction' is selected. This setup specifies that the initial Multi-Factor Authentication (MFA) challenge is sent to the mapped user account in the CyberArk Cloud Directory (Target). Therefore, the initial MFA challenge will indeed be sent to the account in the CyberArk Cloud Directory.

Discussion

oswaldekOption: A

A - correct https://docs.cyberark.com/identity/Latest/en/Content/CoreServices/Authenticate/localAccountLinking.htm?Highlight=local%20account%20linking