CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 131:

  A newly created platform allows users to access a Linux endpoint. When users click to connect, nothing happens. Which piece of the platform is missing?

  A. PSM-SSH Connection Component
  B. UnixPrompts.ini
  C. UnixProcess.ini
  D. PSM-RDP Connection Component
  A. PSM-SSH Connection Component

• Question 132:

  Due to network activity, ACME Corp's PrivateArk Server became active on the OR Vault while the Primary Vault was also running normally. All the components continued to point to the Primary Vault. Which steps should you perform to restore DR replication to normal?

  A. Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
  B. Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
  C. Shutdown PrivateArk Server on Primary Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
  D. Shutdown PrivateArk Server on DR Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
  A. Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Upgrading-to-a-Distributed-Vaults-Environment-from-an-Active-Passive-Vault-DR-Environment.htm?Highlight=safe%20does%20not% 20support%20properties

• Question 133:

  Which of the following options is not set in the Master Policy?

  A. Password Expiration Time
  B. Enabling and Disabling of the Connection Through the PSM
  C. Password Complexity
  D. The use of "One-Time-Passwords"
  C. Password Complexity

• Question 134:

  DRAG DROP

  Match the log file name with the CyberArk Component that generates the log.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PVWA-Logging.htm

• Question 135:

  A recently-hired colleague onboarded five new Local Accounts that are used for five standalone Windows Servers. After attempting to connect to the servers from PVWA, the colleague noticed that the "Connect" button was greyed out for all five new accounts.

  What can you do to help your colleague resolve this issue? (Choose two.)

  A. Verify that the address field is populated with an IP or FQDN of each server.
  B. Verify that the correct PSM connection component appears within account platform settings.
  C. Verify that the address field is blank and that the correct PSM connection component appears within account platform settings.
  D. Notify the Windows Team that created the new accounts that the CyberArk PAM solution is not designed to manage local accounts on Windows Servers.
  E. Verify that the "Disable automatic management for this account" setting for each account is not enabled.
  A. Verify that the address field is populated with an IP or FQDN of each server.
  B. Verify that the correct PSM connection component appears within account platform settings.

• Question 136:

  You are onboarding an account that is not supported out of the box. What should you do first to obtain a platform to import?

  A. Create a service ticket in the customer portal explaining the requirements of the custom platform.
  B. Search common community portals like stackoverflow, reddit, github for an existing platform.
  C. From the platforms page, uncheck the "Hide non-supported platforms" checkbox and see if a platform meeting your needs appears.
  D. Visit the CyberArk marketplace and search for a platform that meets your needs.
  D. Visit the CyberArk marketplace and search for a platform that meets your needs.

• Question 137:

  Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.

  A. HeadStartInterval
  B. Interval
  C. ImmediateInterval
  D. The CPM does not change the password under this circumstance
  B. Interval

• Question 138:

  You have been asked to create an account group and assign three accounts which belong to a cluster. When you try to create a new group, you receive an unauthorized error; however, you are able to edit other aspects of the account

  properties.

  Which safe permission do you need to manage account groups?

  A. create folders
  B. specify next account content
  C. rename accounts
  D. manage safe
  A. create folders

• Question 139:

  What is the purpose of the PrivateArk Database service?

  A. Communicates with components
  B. Sends email alerts from the Vault
  C. Executes password changes
  D. Maintains Vault metadata
  D. Maintains Vault metadata

• Question 140:

  Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.

  A. TRUE
  B. FALSE
  B. FALSE