CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 121:

  According to the DEFAULT Web Options settings, which group grants access to the REPORTS page?

  A. PVWAUsers
  B. Vault Admins
  C. Auditors
  D. PVWAMonitor
  D. PVWAMonitor

• Question 122:

  The Active Directory User configured for Windows Discovery needs which permission(s) or membership?

  A. Member of Domain Admin Group
  B. Member of LDAP Admin Group
  C. Read and Write Permissions
  D. Read Only Permissions
  D. Read Only Permissions

• Question 123:

  What is the purpose of the PrivateArk Server service?

  A. Executes password changes
  B. Maintains Vault metadata
  C. Makes Vault data accessible to components
  D. Sends email alerts from the Vault
  C. Makes Vault data accessible to components

• Question 124:

  Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

  A. Discovery and Audit (DMA)
  B. Auto Detection (AD)
  C. Export Vault Data (EVD)
  D. On Demand Privileges Manager (OPM)
  E. Accounts Discovery
  A. Discovery and Audit (DMA)
  B. Auto Detection (AD)
  E. Accounts Discovery

• Question 125:

  Which of these accounts onboarding methods is considered proactive?

  A. Accounts Discovery
  B. Detecting accounts with PTA
  C. A Rest API integration with account provisioning software
  D. A DNA scan
  B. Detecting accounts with PTA

• Question 126:

  Which processes reduce the risk of credential theft? (Choose two.)

  A. require dual control password access approval
  B. require password change every X days
  C. enforce check-in/check-out exclusive access
  D. enforce one-time password access
  B. require password change every X days
  D. enforce one-time password access

• Question 127:

  Which of the Following can be configured in the Master Poky? Choose all that apply.

  A. Dual Control
  B. One Time Passwords
  C. Exclusive Passwords
  D. Password Reconciliation
  E. Ticketing Integration
  F. Required Properties
  G. Custom Connection Components
  H. Password Aging Rules
  A. Dual Control
  B. One Time Passwords
  C. Exclusive Passwords
  H. Password Aging Rules

• Question 128:

  It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur

  A. TRUE
  B. FALSE
  A. TRUE

• Question 129:

  Which certificate type do you need to configure the vault for LDAP over SSL?

  A. the CA Certificate that signed the certificate used by the External Directory
  B. a CA signed Certificate for the Vault server
  C. a CA signed Certificate for the PVWA server
  D. a self-signed Certificate for the Vault
  A. the CA Certificate that signed the certificate used by the External Directory

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Configuring-Transparent-User-Management.htm#ConfigureLDAPoverSSLconnectionsrecommended

• Question 130:

  Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?

  A. Yes, when using the connect button, CyberArk uses the PMTerminal.exe process which bypasses the root SSH restriction.
  B. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.
  C. Yes, if a logon account is associated with the root account.
  D. No, it is not possible.
  B. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.