Pass the Forcepoint Forcepoint DSPM DSPM- Deploy-and-Administer Questions and answers with CertsForce

Correct order: 3 → 2 → 6 → 5 → 4 → 1

Navigate to Administration > User Management .

Set realm to gv .

Select Users , then Add user .

Fill in the necessary user information.

Select Join Groups .

Select Administrators .

Forcepoint DSPM user administration for a standalone deployment is performed through the Keycloak-based user management workflow. The sequence begins by entering the DSPM administration area and opening User Management , which places the administrator in the identity-management context used to control DSPM UI access. The next critical step is selecting the gv realm. Forcepoint documentation specifically instructs administrators to select the gv realm after logging into Keycloak and warns against changing settings in the Master realm, because the DSPM application authorization model is tied to the gv realm rather than the default administrative realm.

After the correct realm is active, the administrator creates the account by selecting Users , choosing Add user , and entering required identity fields such as username, email, first name, and last name. Once the user object exists, access is completed through RBAC group membership. Forcepoint’s RBAC guidance recommends group-based role assignment: navigate to the user, open the Groups area, search/select the appropriate group, and click Join . Selecting Administrators grants the required administrative group membership and resulting DSPM access.

The correct selections are Rule-Based Automation, Incident Management, Webhook Notification System, and Workflow Configuration Tool . Forcepoint DSPM Controls Orchestration is built around rules that identify data requiring attention and can trigger notifications or automated responses. The official documentation describes Controls Orchestration as providing “automated work flows, rule-based detection, timely notifications, and efficient incident management,” which directly maps to these four options.

Rule-Based Automation is represented by custom rules that evaluate datasets such as files, trustees, or agent activities using GQL conditions. Workflow Configuration Tool is reflected in the rule-building process under Policy Center > Controls Orchestration , where administrators create rules, define ownership, select the asset, configure conditions, and enable the rule.

Webhook Notification System is valid because orchestration rules can send notifications outside Forcepoint DSPM, and webhook functionality sends HTTP requests to a configured callback endpoint when a defined condition is met. Incident Management is also core because each rule is automatically added as a card in the Incidents tab, linking detected conditions to operational review and response. Rule-Based Remediation is not the best answer here because remediation is an outcome of automated response workflows, not the named key feature in this option set. References/topics: Controls Orchestration, GQL Rules, Webhooks, Incidents, Policy Center .