CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 101:

  DRAG DROP

  ADR Vault became active due to a failure of the primary Vault. Service on the primary Vault has now been restored. Arrange the steps to return the DR vault to its normal standby mode in the correct sequence.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  1. Stop the Vault Server using the PrivateArk Server Administration Console (For HA Vault, use the Cluster Administrator) and confirm that the Cyberark Event Notification Engine service has been stopped via the services.msc console.

  2. Set the “FailoverMode” variable in \Program Files (x86)\Privateark\padr\padr.ini to No.

  3. Delete the following two entries in the padr.ini: NextBinaryLogNumberToStartAt, LastDataReplicationTimestamp

  4. Start “CyberArk Disaster Recovery service”

  5. Check \Program Files (x86)\Privateark\padr\padr.log to make sure replication is successful from Production Vault to DR Vault.

• Question 102:

  What is the purpose of the Interval setting in a CPM policy?

  A. To control how often the CPM looks for System Initiated CPM work.
  B. To control how often the CPM looks for User Initiated CPM work.
  C. To control how long the CPM rests between password changes.
  D. To control the maximum amount of time the CPM will wait for a password change to complete.
  A. To control how often the CPM looks for System Initiated CPM work.

• Question 103:

  DRAG DROP

  A new HTML5 Gateway has been deployed in your organization.

  From the PVWA, arrange the steps to configure a PSM host to use the HTML5 Gateway in the correct sequence.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 104:

  What is the purpose of the CyberArk Event Notification Engine service?

  A. It sends email messages from the Central Policy Manager (CPM)
  B. It sends email messages from the Vault
  C. It processes audit report messages
  D. It makes Vault data available to components
  D. It makes Vault data available to components

• Question 105:

  Where can PTA be configured to send alerts? (Choose two.)

  A. SIEM
  B. Email
  C. Google Analytics
  D. EVD
  E. PAReplicate
  A. SIEM
  B. Email

• Question 106:

  When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

  A. True; this is the default behavior
  B. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file
  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file
  D. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the dbparm.ini file
  B. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file

• Question 107:

  Customers who have the `Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 108:

  To ensure all sessions are being recorded, a CyberArk administrator goes to the master policy and makes configuration changes. Which configuration is correct?

  A. Require privileged session monitoring and isolation = inactive; Record and save session activity = active.
  B. Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive.
  C. Require privileged session monitoring and isolation = active; Record and save session activity = active.
  D. Require privileged session monitoring and isolation = active; Record and save session activity = inactive.
  C. Require privileged session monitoring and isolation = active; Record and save session activity = active.

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring-Recordings-and-Audits-in-PSM.htm

• Question 109:

  What is the purpose of the Immediate Interval setting in a CPM policy?

  A. To control how often the CPM looks for System Initiated CPM work.
  B. To control how often the CPM looks for User Initiated CPM work.
  C. To control how often the CPM rests between password changes.
  D. To Control the maximum amount of time the CPM will wait for a password change to complete.
  B. To control how often the CPM looks for User Initiated CPM work.

  ---

  Explanation/Reference:

  When the Master Policy enforces check-in/check-out exclusive access, passwords are changed when the user clicks the Release button and releases the account. This is based on the ImmediateInterval parameter in the applied platform. If the user forgets to release the account, it is automatically released and changed by the CPM after a predetermined number of minutes, defined in the MinValidityPeriod parameter specified in the platform

• Question 110:

  Your organization has a requirement to allow only one user to "check out passwords" and connect through the PSM securely. What needs to be configured in the Master policy to ensure this will happen?

  A. Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active
  B. Enforce check-in/check-out exclusive access = inactive; Require privileged session monitoring and isolation = inactive
  C. Enforce check-in/check-out exclusive access = inactive; Record and save session activity = active
  D. Enforce check-in/check-out exclusive access = active; Record and save session activity = inactive
  A. Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-master-policy-rules.htm