CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 131:

  What is the configuration file used by the CPM scanner when scanning UNIX/Linux devices?

  A. UnixPrompts.ini

  B. plink.exe

  C. dbparm.ini

  D. PVConfig.xml

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/PASIMP/PVWA-Accounts-Feed.htm#:~:text=When%20scanning%20Unix%2FLinux%20devices,ini%20configuration%20file

• Question 132:

  Which CyberArk utility allows you to create lists of Master Policy Settings, owners and safes for output to text files or MSSQL databases?

  A. Export Vault Data

  B. Export Vault Information

  C. PrivateArk Client

  D. Privileged Threat Analytics

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/EVD/Exporting-Data-to-Files.htm?Highlight=evd%20italog

• Question 133:

  Which keys are required to be present in order to start the PrivateArk Server service?

  A. Recovery public key

  B. Recovery private key

  C. Server key

  D. Safe key

  Correct Answer: AC

• Question 134:

  What is the purpose of the password change process?

  A. To test that CyberArk is storing accurate credentials for accounts

  B. To change the password of an account according to organizationally defined password rules

  C. To allow CyberArk to manage unknown or lost credentials

  D. To generate a new complex password

  Correct Answer: B

• Question 135:

  Accounts Discovery allows secure connections to domain controllers.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 136:

  For Digital Vault Cluster in a high availability configuration, how does the cluster determine if a node is down?

  A. The heartbeat s no longer detected on the private network.

  B. The shared storage array is offline.

  C. An alert is generated in the Windows Event log.

  D. The Digital Vault Cluster does not detect a node failure.

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the-CyberArk-Digital-Cluster-Vault-Server.htm?TocPath=Administration%7CComponents%7CDigital%20Vault%7COperate%20the% 20CyberArk%20Vault%7CCyberArk%20HighAvailability%20Vault%20Cluster%7C_____1

• Question 137:

  When managing SSH keys, the CPM stored the Private Key

  A. In the Vault

  B. On the target server

  C. A and B

  D. Nowhere because the private key can always be generated from the public key.

  Correct Answer: A

• Question 138:

  How does the Vault administrator apply a new license file?

  A. Upload the license.xml file to the system Safe and restart the PrivateArk Server service

  B. Upload the license.xml file to the system Safe

  C. Upload the license.xml file to the Vault Internal Safe and restart the PrivateArk Server service

  D. Upload the license.xml file to the Vault Internal Safe

  Correct Answer: B

• Question 139:

  Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile Utility? (Choose three.)

  A. Operating System Username

  B. Current machine IP

  C. Current machine hostname

  D. Operating System Type (Linux/Windows/HP-UX)

  E. Vault IP Address

  F. Time Frame

  Correct Answer: ABC

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/CreateCredFile-Utility.htm

• Question 140:

  Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.

  A. PACli.ini

  B. Vault.ini

  C. conf.ini

  D. A comma delimited upload file

  Correct Answer: BCD