CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 1:

  If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

  A. Configure the Provider to change the password to match the Vault's Password
  B. Associate a reconcile account and configure the platform to reconcile automatically
  C. Associate a logon account and configure the platform to reconcile automatically
  D. Run the correct auto detection process to rediscover the password
  B. Associate a reconcile account and configure the platform to reconcile automatically

• Question 2:

  Secure Connect provides the following. Choose all that apply.

  A. PSM connections to target devices that are not managed by CyberArk.
  B. Session Recording
  C. Real-time live session monitoring.
  D. PSM connections from a terminal without the need to login to the PVWA
  A. PSM connections to target devices that are not managed by CyberArk.
  B. Session Recording

• Question 3:

  It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

  A. TRUE
  B. FALS
  A. TRUE

  ---

  explanation:

  Explanation/Reference:

  Password reconciliation can be restricted to specific days. This means that the CPM will only reconcile passwords on the days of the week specified in the RCExecutionDays parameter. The days of the week are represented by the first 3 letters of the name of the day. Sunday is represented by Sun, Mondayby Mon, etc.

• Question 4:

  Users are unable to launch Web Type Connection components from the PSM server. Your manager asked you to open the case with CyberArk Support. Which logs will help the CyberArk Support Team debug the issue? (Choose three.)

  A. PSMConsole.log
  B. PSMDebug.log
  C. PSMTrace.log
  D. .Component.log
  E. PMconsole.log
  F. ITAlog.log
  B. PSMDebug.log
  C. PSMTrace.log
  F. ITAlog.log

  ---

  explanation:

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.6/en/Content/PSMC/PSMC_Troubleshooting.htm

• Question 5:

  Which service should NOT be running on the DR Vault when the primary Production Vault is up?

  A. PrivateArk Database
  B. PrivateArk Server
  C. CyberArk Vault Disaster Recovery (DR) service
  D. CyberArk Logical Container
  B. PrivateArk Server

• Question 6:

  A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request. What is the correct location to identify users or groups who can approve?

  A. PVWA> Administration > Platform Configuration > Edit Platform > UI and Workflow > Dual Control> Approvers
  B. PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests
  C. PVWA> Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers
  D. PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)
  B. PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests

  ---

  explanation:

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-setup-workflow.htm

• Question 7:

  CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 8:

  Your customer, ACME Corp, wants to store the Safes Data in Drive D instead of Drive C.

  Which file should you edit?

  A. TSparm.ini
  B. Vault.ini
  C. DBparm.ini
  D. user.ini
  A. TSparm.ini

  ---

  explanation:

  Explanation/Reference:

  Reference: https://cyberark-customers.force.com/s/article/00004103

• Question 9:

  Which permissions are needed for the Active Directory user required by the Windows Discovery process?

  A. Domain Admin
  B. LDAP Admin
  C. Read/Write
  D. Read
  D. Read

  ---

  explanation:

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/10.10/en/Content/PASIMP/Supported-Target-Machines.htm

• Question 10:

  Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.

  A. TRUE
  B. FALSE
  B. FALSE