CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 111:

  What does the Export Vault Data (EVD) utility do?

  A. exports data from the Vault to TXT or CSV files, or to MSSQL databases
  B. generates a backup file that can be used as a cold backup
  C. exports all passwords and imports them into another instance of CyberArk
  D. keeps two active vaults in sync
  A. exports data from the Vault to TXT or CSV files, or to MSSQL databases

• Question 112:

  Which user is automatically added to all Safes and cannot be removed?

  A. Auditor
  B. Administrator
  C. Master
  D. Operator
  C. Master

• Question 113:

  Which tools can you use to identify the machines and accounts that create the highest risk and are exposed to lateral movement? (Choose two.)

  A. Accounts Discovery Feed
  B. CyberArk DNA Report
  C. REST API Scripts
  D. CyberArk DNA Map
  E. Get-LocalUser Powershell cmdlet
  B. CyberArk DNA Report
  D. CyberArk DNA Map

• Question 114:

  Before failing back to the production infrastructure after a DR exercise, what must you do to maintain audit history during the DR event?

  A. Ensure that the Production Instance replicates changes that occurred from the Disaster Recovery Instance.
  B. Briefly stop and start the Disaster Recovery Instance before attempting to fail components back to the Production Instance.
  C. Stop the CPM services before starting the production server.
  D. Perform an IIS Reset on all PVWA servers.
  A. Ensure that the Production Instance replicates changes that occurred from the Disaster Recovery Instance.

• Question 115:

  You want to give a newly-created group rights to review security events under the Security pane. You also want to be able to update the status of these events. Where must you update the group to allow this?

  A. in the PTAAuthorizationGroups parameter, found in Administration > Options > PTA
  B. in the PTAAuthorizationGroups parameter, found in Administration > Options > General
  C. in the SecurityEventsAuthorizationGroups parameter, found in Administration > Security > Options
  D. in the SecurityEventsFeedAuthorizationGroups parameter, found in Administration > Options > General
  D. in the SecurityEventsFeedAuthorizationGroups parameter, found in Administration > Options > General

• Question 116:

  You created a new platform by duplicating the out-of-box Linux through the SSH platform. Without any change, which Text Recorder Type(s) will the new platform support? (Choose two.)

  A. SSH Text Recorder
  B. Universal Keystrokes Text Recorder
  C. Events Text Recorder
  D. SQL Text Recorder
  E. Telnet Commands Text Recorder
  A. SSH Text Recorder
  B. Universal Keystrokes Text Recorder

• Question 117:

  You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account. How should this be configured to allow for password management using least privilege?

  A. Configure each CPM to use the correct logon account.
  B. Configure each CPM to use the correct reconcile account.
  C. Configure the UNIX platform to use the correct logon account.
  D. Configure the UNIX platform to use the correct reconcile account.
  C. Configure the UNIX platform to use the correct logon account.

  ---

  Explanation/Reference:

  Reference:https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/PASIMP/Linked-PAS-Accounts.htm#Overview

• Question 118:

  Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 119:

  Which configuration file is used by the CPM scanner when scanning UNIX/Linux devices?

  A. UnixPrompts.ini
  B. plink.exe
  C. dbparm.ini
  D. UnixScanner.ini
  A. UnixPrompts.ini

• Question 120:

  For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

  A. Create an exception to the Master Policy to exclude the group from the workflow process.
  B. Edith the master policy rule and modify the advanced' Access safe without approval' rule to include the group.
  C. On the safe in which the account is stored grant the group the' Access safe without audit' authorization.
  D. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization.
  D. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization.