CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 1:

  By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

  A. Vault Admins
  B. Security Admins
  C. Security Operators
  D. Auditors
  B. Security Admins

• Question 2:

  You need to identity the most powerful accounts in your organization to prepare for the initial PAM onboarding process.

  Which tools or features can be used to locate and onboard these accounts? (Choose two.)

  A. Discovery and Audit (DNA)
  B. CyberArk's Command Line Interface (PACLI)
  C. Onboarding and Secure Account Feed
  D. Accounts Discovery
  E. Privilege Account Matrix (PAM) XLS
  A. Discovery and Audit (DNA)
  D. Accounts Discovery

• Question 3:

  You have been asked to identify the up or down status of Vault Services. Which CyberArk utility can you use to accomplish this task?

  A. PrivateArk Central Administration Console
  B. PAS Reporter
  C. PrivateArk Remote Control Agent
  D. Syslog
  C. PrivateArk Remote Control Agent

• Question 4:

  If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attached to the account?

  A. KeyPath
  B. KeyFile
  C. ObjectName
  D. Address
  B. KeyFile

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/10.10/en/Content/PASIMP/Adding-Accounts-with-SSH-Keys-using-the-AccountUploader-Utility-Appendix.htm

• Question 5:

  To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?

  A. List Accounts, Use Accounts
  B. List Accounts, Use Accounts, Retrieve Accounts
  C. Use Accounts
  D. List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation
  A. List Accounts, Use Accounts

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PSSO-PSMConnecPVWA.htm?TocPath=End%20User%7CConnect%20to%20Accounts%7CPrivileged%20Single%20Sign-On%7C_____2

• Question 6:

  You are creating a Dual Control workflow for a team's safe. Which safe permissions must you grant to the Approvers group?

  A. List accounts, Authorize account request
  B. Retrieve accounts, Access Safe without confirmation
  C. Retrieve accounts, Authorize account request
  D. List accounts, Unlock accounts
  A. List accounts, Authorize account request

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PVWA-Dual-Control.htm (expand all and search for retrieve accounts)

• Question 7:

  You are concerned about the Windows Domain password changes occurring during business hours. Which settings must be updated to ensure passwords are only rotated outside of business hours?

  A. In the platform policy Automatic Password Management > Password Change > ToHour and FromHour
  B. in the Master Policy Account Change Window > ToHour and From Hour
  C. Administration Settings CPM Settings > ToHour and FromHour
  D. On each individual account Edit > Advanced > ToHour and FromHour
  A. In the platform policy Automatic Password Management > Password Change > ToHour and FromHour

• Question 8:

  Which keys are required to be present in order to start the PrivateArk Server service?

  A. Recovery public key
  B. Recovery private key
  C. Server key
  D. Safe key
  A. Recovery public key
  C. Server key

• Question 9:

  Which file must be edited on the Vault to configure it to send data to PTA?

  A. dbparm.ini
  B. PARAgent.ini
  C. my.ini
  D. padr.ini
  A. dbparm.ini

• Question 10:

  You received a notification from one of your CyberArk auditors that they are missing Vault level audit permissions. You confirmed that all auditors are missing the Audit Users Vault permission. Where do you update this permission for all auditors?

  A. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Vault Authorizations
  B. Private Ark Client > Tools > Administrative Tools > Users and Groups > Auditors > Authorizations tab
  C. PVWA User Provisioning > LDAP integration > Vault Auditors Mapping > Vault Authorizations
  D. PVWA> Administration > Configuration Options > LDAP integration > Vault Auditors Mapping > Vault Authorizations
  B. Private Ark Client > Tools > Administrative Tools > Users and Groups > Auditors > Authorizations tab

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-Users.htm