CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 141:

  You are logging into CyberArk as the Master user to recover an orphaned safe. Which items are required to log in as Master?

  A. Master CD, Master Password, console access to the Vault server, Private Ark Client
  B. Operator CD, Master Password, console access to the PVWA server, PVWA access
  C. Operator CD, Master Password, console access to the Vault server, Recover.exe
  D. Master CD, Master Password, console access to the PVWA server, Recover.exe
  A. Master CD, Master Password, console access to the Vault server, Private Ark Client

  ---

  Explanation/Reference:

  Reference: https://cyberark-customers.force.com/s/article/How-to-log-in-as-the-Master-user

• Question 142:

  You receive this error:

  "Error in changepass to user domain\user on domain server(\domain.(winRc=5) Access is denied."

  Which root cause should you investigate?

  A. The account does not have sufficient permissions to change its own password.
  B. The domain controller is unreachable.
  C. The password has been changed recently and minimum password age is preventing the change.
  D. The CPM service is disabled and will need to be restarted.
  A. The account does not have sufficient permissions to change its own password.

  ---

  Explanation/Reference:

  Reference: https://cyberark-customers.force.com/s/article/CPM-can-login-and-verify-a-password-but-can-t-change-the-password-winRc-5-Access-is-denied

• Question 143:

  In the Private Ark client, how do you add an LDAP group to a CyberArk group?

  A. Select Update on the CyberArk group, and then click Add > LDAP Group
  B. Select Update on the LDAP Group, and then click Add > LDAP Group
  C. Select Member Of on the CyberArk group, and then click Add > LDAP Group
  D. Select Member Of on the LDAP group, and then click Add > LDAP Group
  A. Select Update on the CyberArk group, and then click Add > LDAP Group

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/LPLDAPIntegration.htm?TocPath=Administration%7CUser%20Management%7CTransparent%20user%20management%20using% 20LDAP%7C_____2

• Question 144:

  You need to enable the PSM for all platforms. Where do you perform this task?

  A. Platform Management > (Platform) > UI and Workflows
  B. Master Policy > Session Management
  C. Master Policy > Privileged Access Workflows
  D. Administration > Options > Connection Components
  B. Master Policy > Session Management

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Customizing-PSM-for-Specific-Platforms.htm?TocPath=Administration%7CComponents%7CPrivileged%20Session%20Manager% 7CConfiguration%7C_____8

• Question 145:

  Which methods can you use to add a user directly to the Vault Admin Group? (Choose three.)

  A. REST API
  B. PrivateArk Client
  C. PACLI
  D. PVWA
  E. Active Directory
  F. Sailpoint
  A. REST API
  B. PrivateArk Client
  C. PACLI

• Question 146:

  You notice an authentication failure entry for the DR user in the ITALog.

  What is the correct process to fix this error? (Choose two.)

  A. PrivateArk Client > Tools > Administrative Tools > Users and Groups > DR User > Update > Authentication > Update Password.
  B. Create a new credential file, on the DR Vault, using the CreateCredFile utility and the newly set password. . Create a new credential file, on the Primary Vault, using the CreateCredFile utility and the newly set password.
  C. PVWA > User Provisioning > Users and Groups > DR User > Update Password.
  D. PrivateArk Client > Tools > Administrative Tools > Users and Groups > PAReplicate User > Update > Authentication > Update Password.
  A. PrivateArk Client > Tools > Administrative Tools > Users and Groups > DR User > Update > Authentication > Update Password.
  C. PVWA > User Provisioning > Users and Groups > DR User > Update Password.

• Question 147:

  To manage automated onboarding rules, a CyberArk user must be a member of which group?

  A. Vault Admins
  B. CPM User
  C. Auditors
  D. Administrators
  A. Vault Admins

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/automatic_onboarding_rules.htm#:~:text=To%20manage%20onboarding%20rules%2C%20users,to%20the%20Vault%20admins%20group

• Question 148:

  Your customer, ACME Corp, wants to store the Safes Data in Drive D instead of Drive C.

  Which file should you edit?

  A. TSparm.ini
  B. Vault.ini
  C. DBparm.ini
  D. user.ini
  A. TSparm.ini

  ---

  Explanation/Reference:

  Reference: https://cyberark-customers.force.com/s/article/00004103

• Question 149:

  In addition to add accounts and update account contents, which additional permission on the safe is required to add a single account?

  A. Upload Accounts Properties
  B. Rename Accounts
  C. Update Account Properties
  D. Manage Safe
  C. Update Account Properties

• Question 150:

  Users can be resulted to using certain CyberArk interfaces (e.g.PVWA or PACLI).

  A. TRUE
  B. FALS
  A. TRUE