CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 91:

  Which of the following Privileged Session Management (PSM) solutions support live monitoring of active sessions?

  A. PSM (i.e., launching connections by clicking on the connect button in the Password Vault Web Access (PVWA)
  B. PSM for Windows (previously known as RDP Proxy)
  C. PSM for SSH (previously known as PSM-SSH Proxy)
  D. All of the above
  D. All of the above

• Question 92:

  Where can reconcile and/or logon accounts be linked to an account? (Choose two.)

  A. account settings
  B. platform settings
  C. master policy
  D. safe settings
  E. service account settings
  A. account settings
  B. platform settings

• Question 93:

  What is the easiest way to duplicate an existing platform?

  A. From PrivateArk, copy/paste the appropriate Policy.ini file; then rename it.
  B. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.
  C. From PrivateArk, copy/paste the appropriate settings in PVConfiguration.xml; then update the policyName variable.
  D. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click "Save as" INSTEAD of save to duplicate and rename the platform.
  B. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.

• Question 94:

  A logon account can be specified in the platform settings.

  A. True
  B. False
  A. True

• Question 95:

  CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 96:

  Where can you check that the LDAP binding is using TCP/636?

  A. in Active Directory under "Users OU" => "User Properties" => "External Bindings" => "Port"
  B. in PVWA, under "LDAP Integration" => "LDAP" => "Directories" => "" => "Hosts" => "Host"
  C. in PrivateArk Client, under "Tools" => "Administrative Tools" => "Directory Mapping" => ""
  D. From the PVWA, connect to the domain controller using Test-NetConnection on Port 636.
  D. From the PVWA, connect to the domain controller using Test-NetConnection on Port 636.

• Question 97:

  Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile Utility? (Choose three.)

  A. Operating System Username
  B. Current machine IP
  C. Current machine hostname
  D. Operating System Type (Linux/Windows/HP-UX)
  E. Vault IP Address
  F. Time Frame
  A. Operating System Username
  B. Current machine IP
  C. Current machine hostname

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/CreateCredFile-Utility.htm

• Question 98:

  Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

  A. PSM (i.e., launching connections by clicking on the "Connect" button in the PVWA)
  B. PSM for Windows (previously known as RDP Proxy)
  C. PSM for SSH (previously known as PSM SSH Proxy)
  D. All of the above
  A. PSM (i.e., launching connections by clicking on the "Connect" button in the PVWA)

• Question 99:

  When a DR Vault Server becomes an active vault, it will automatically fail back to the original state once the Primary Vault comes back online.

  A. True; this is the default behavior
  B. False; this is not possible
  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file
  D. True, if the AllowFailback setting is set to "yes" in the dbparm.ini file
  B. False; this is not possible

• Question 100:

  It is possible to control the hours of the day during which a user may log into the vault.

  A. TRUE
  B. FALSE
  A. TRUE