CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 1:

  It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

  A. TRUE

  B. FALS

  Correct Answer: A

  Password reconciliation can be restricted to specific days. This means that the CPM will only reconcile passwords on the days of the week specified in the RCExecutionDays parameter. The days of the week are represented by the first 3 letters of the name of the day. Sunday is represented by Sun, Mondayby Mon, etc.

• Question 2:

  Users are unable to launch Web Type Connection components from the PSM server. Your manager asked you to open the case with CyberArk Support. Which logs will help the CyberArk Support Team debug the issue? (Choose three.)

  A. PSMConsole.log

  B. PSMDebug.log

  C. PSMTrace.log

  D. .Component.log

  E. PMconsole.log

  F. ITAlog.log

  Correct Answer: BCF

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.6/en/Content/PSMC/PSMC_Troubleshooting.htm

• Question 3:

  Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

  A. Accounts Discovery

  B. Auto Detection

  C. Onboarding RestAPI functions

  D. PTA Rules

  Correct Answer: B

• Question 4:

  Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.

  A. HeadStartInterval

  B. Interval

  C. ImmediateInterval

  D. The CPM does not change the password under this circumstance

  Correct Answer: B

• Question 5:

  Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 6:

  Which permissions are needed for the Active Directory user required by the Windows Discovery process?

  A. Domain Admin

  B. LDAP Admin

  C. Read/Write

  D. Read

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/10.10/en/Content/PASIMP/Supported-Target-Machines.htm

• Question 7:

  Your customer, ACME Corp, wants to store the Safes Data in Drive D instead of Drive C. Which file should you edit?

  A. TSparm.ini

  B. Vault.ini

  C. DBparm.ini

  D. user.ini

  Correct Answer: A

  Reference: https://cyberark-customers.force.com/s/article/00004103

• Question 8:

  CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 9:

  A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request. What is the correct location to identify users or groups who can approve?

  A. PVWA> Administration > Platform Configuration > Edit Platform > UI and Workflow > Dual Control> Approvers

  B. PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests

  C. PVWA> Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers

  D. PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-setup-workflow.htm

• Question 10:

  Which item is an option for PSM recording customization?

  A. Windows events text recorder with automatic play-back

  B. Windows events text recorder and universal keystrokes recording simultaneously

  C. Universal keystrokes text recorder with windows events text recorder disabled

  D. Custom audio recording for windows events

  Correct Answer: C