CyberArk Defender – Access — Question 5

Which statement is correct about the CyberArk Identity Windows Device Trust enrollment process?

Answer options

• A. An enrollment code is optional.
• B. The endpoint does not need to be a domain-joined machine.
• C. You can define the maximum number of joinable endpoints.
• D. You can define the minimum number of joinable endpoints.

Correct answer: C

Explanation

The correct answer is C because the CyberArk Identity Windows Device Trust allows administrators to define a maximum number of devices that can be enrolled. Options A and B are incorrect as the enrollment code is typically required and the endpoint must be domain-joined for security reasons. Option D is incorrect as it refers to a minimum rather than a maximum number of endpoints.