CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 91:

  You are configuring a Vault HA cluster.

  Which file should you check to confirm the correct drives have been assigned for the location of the Quorum and Safes data disks?

  A. ClusterVault.ini

  B. my.ini

  C. vault.ini

  D. DBParm.ini

  Correct Answer: A

• Question 92:

  What is the correct process to install a custom platform from the CyberArk Marketplace?

  A. Locate the custom platform in the Marketplace and click Import.

  B. Download the platform from the Marketplace and import it using the PVWA.

  C. Contact CyberArk Support for guidance on how to import the platform.

  D. Duplicate an existing platform and align the setting to match the platform from the Marketplace.

  Correct Answer: B

• Question 93:

  Where can you check that the LDAP binding is using TCP/636?

  A. in Active Directory under "Users OU" => "User Properties" => "External Bindings" => "Port"

  B. in PVWA, under "LDAP Integration" => "LDAP" => "Directories" => "" => "Hosts" => "Host"

  C. in PrivateArk Client, under "Tools" => "Administrative Tools" => "Directory Mapping" => ""

  D. From the PVWA, connect to the domain controller using Test-NetConnection on Port 636.

  Correct Answer: D

• Question 94:

  What does the minvalidity parameter on a platform policy determine?

  A. time between a password retrieval and the account becoming eligible for a password change

  B. timeout for users signed into the PVWA as configured in the global settings

  C. minimum amount of time that Just In Time access is valid

  D. time in minutes before an empty safe will be automatically deleted

  Correct Answer: A

• Question 95:

  How much disk space do you need on a server to run a full replication with PAReplicate?

  A. 500 GB

  B. 1 TB

  C. same as disk size on Satellite Vault

  D. at least the same disk size as the Primary Vault

  Correct Answer: D

• Question 96:

  What can you do to ensure each component server is operational?

  A. Logon to PVWA with v10 UI, navigate to Healthcheck, and validate each component server is connected to the Vault.

  B. Ping each component server to ensure connectivity.

  C. Use the PrivateArk client to connect to the Vault server and validate all the services are running.

  D. Install the Vault Server interface on a remote machine to avoid interactive logon to the Vault OS and review the ITALog.log through the Vault Server interface.

  Correct Answer: A

• Question 97:

  Which master policy settings ensure non-repudiation?

  A. Require password verification every X days and enforce one-time password access.

  B. Enforce check-in/check-out exclusive access and enforce one-time password access.

  C. Allow EPV transparent connections ('Click to connect') and enforce check-in/check-out exclusive access.

  D. Allow EPV transparent connections ('Click to connect') and enforce one-time password access.

  Correct Answer: B

• Question 98:

  Which PTA sensors are required to detect suspected credential theft? (Choose two.)

  A. Logs

  B. Vault Logs

  C. PSM Logs

  D. CPM Logs

  E. EPM

  Correct Answer: AB

• Question 99:

  You have been given the requirement that certain accounts cannot have their passwords updated during business hours.

  How can you set up a configuration to meet this requirement?

  A. Change settings on the CPM configuration safe so that access is permitted after business hours only.

  B. Update the password change parameters of the platform to match the permitted time frame.

  C. Disable automatic CPM management for all accounts that are assigned to this platform.

  D. Add an exception to the Master Policy to allow the action for this platform during the permitted time.

  Correct Answer: B

• Question 100:

  Which setting in the Master Policy controls whether PSM is enabled and sessions will be recorded?

  A. Require privileged session monitoring and isolation = inactive; Record and save session activity = active

  B. Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive

  C. Require privileged session monitoring and isolation = active; Record and save session activity = active

  D. Require privileged session monitoring and isolation = active; Record and save session activity = inactive

  Correct Answer: C