CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 111:

  What are valid ways to invite vendors using the Remote Access portal? (Choose two.)

  A. Use the vendor invitation form.

  B. Call the vendor users and have them scan a QR code.

  C. Use the self-service invitation URL.

  D. Add the vendors in PVWA and send them their password.

  E. Contact CyberArk support to help invite the vendors.

  Correct Answer: AC

• Question 112:

  Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?

  A. They are added to the Pending Accounts list and can be reviewed and manually uploaded.

  B. They cannot be onboarded to the Password Vault.

  C. They must be uploaded using third party tools.

  D. They are not part of the Discovery Process.

  Correct Answer: A

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-accounts-discovery.htm

• Question 113:

  You are adding a new application in the Remote Access portal.

  Which authentication methods can you use to authenticate users to the PVWA? (Choose two.)

  A. Password

  B. OpenID

  C. Certificate

  D. SAML

  E. OTP

  Correct Answer: BD

• Question 114:

  Where can you find resources to learn more about the CyberArk Blueprint? (Choose two.)

  A. CyberArk Blueprint Webpage

  B. References within the Identity Security Platform

  C. Product Webinars

  D. CyberArk University Course

  Correct Answer: AD

• Question 115:

  You need to identity the most powerful accounts in your organization to prepare for the initial PAM onboarding process.

  Which tools or features can be used to locate and onboard these accounts? (Choose two.)

  A. Discovery and Audit (DNA)

  B. CyberArk's Command Line Interface (PACLI)

  C. Onboarding and Secure Account Feed

  D. Accounts Discovery

  E. Privilege Account Matrix (PAM) XLS

  Correct Answer: AD

• Question 116:

  What are common ways that organizations leverage the CyberArk Blueprint for Identity Security Success? (Choose three.)

  A. to understand the identity attack chain

  B. to discover all digital identities

  C. to describe the explicit order of operations for Identity Security

  D. to assess an organization's security posture

  E. to build an Identity Security roadmap

  F. to secure their human identities

  Correct Answer: ADE

• Question 117:

  The Vault administrator can change the Vault license by uploading the new license to the system Safe.

  A. True

  B. False

  Correct Answer: A

• Question 118:

  The vault supports Subnet Based Access Control.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 119:

  You have been asked to turn off the time access restrictions for a safe. Where is this setting found?

  A. PrivateArk

  B. RestAPI

  C. Password Vault Web Access (PVWA)

  D. Vault

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/Advanced-Safe-Management.htm

• Question 120:

  Time of day or day of week restrictions on when password verifications can occur configured in ____________________.

  A. The Master Policy

  B. The Platform settings

  C. The Safe settings

  D. The Account Details

  Correct Answer: B