CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 141:

  Your organization has a requirement to allow only one user to "check out passwords" and connect through the PSM securely. What needs to be configured in the Master policy to ensure this will happen?

  A. Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active

  B. Enforce check-in/check-out exclusive access = inactive; Require privileged session monitoring and isolation = inactive

  C. Enforce check-in/check-out exclusive access = inactive; Record and save session activity = active

  D. Enforce check-in/check-out exclusive access = active; Record and save session activity = inactive

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-master-policy-rules.htm

• Question 142:

  SAFE Authorizations may be granted to____________. Select all that apply.

  A. Vault Users

  B. Vault Group

  C. LDAP Users

  D. LDAP Groups

  Correct Answer: ABCD

• Question 143:

  Which values are acceptable in the address field of an Account?

  A. It must be a Fully Qualified Domain Name (FQDN)

  B. It must be an IP address

  C. It must be NetBIOS name

  D. Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable

  Correct Answer: D

• Question 144:

  Which CyberArk group does a user need to be part of to view recordings or live monitor sessions?

  A. Auditors

  B. Vault Admin

  C. DR Users

  D. Operators

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Monitoring-Privileged-Sessions.htm?TocPath=End%20User%7CMonitor%20Sessions%7CClassic%20Interface %7C_____1

• Question 145:

  A Vault Administrator team member can log in to CyberArk, but for some reason, is not given Vault Admin rights. Where can you check to verify that the Vault Admins directory mapping points to the correct AD group?

  A. PVWA > User Provisioning > LDAP Integration > Mapping Criteria

  B. PVWA > User Provisioning > LDAP Integration > Map Name

  C. PVWA > Administration > LDAP Integration > Mappings

  D. PVWA > Administration > LDAP Integration > AD Groups

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/LPLDAPIntegration.htm?TocPath=Administration%7CUser%20Management%7CTransparent%20user%20management%20using% 20LDAP%7C_____2

• Question 146:

  If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attached to the account?

  A. KeyPath

  B. KeyFile

  C. ObjectName

  D. Address

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/10.10/en/Content/PASIMP/Adding-Accounts-with-SSH-Keys-using-the-AccountUploader-Utility-Appendix.htm

• Question 147:

  The Password upload utility can be used to create safes.

  A. TRUE

  B. FALS

  Correct Answer: A

• Question 148:

  Which PTA sensors are required to detect suspected credential theft?

  A. Logs, Vault Logs

  B. Logs, Network Sensor, Vault Logs

  C. Logs, PSM Logs, CPM Logs

  D. Logs, Network Sensor, EPM

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/10.10/en/Content/PTA/What-Does-PTA-Detect.htm

• Question 149:

  When onboarding multiple accounts from the Pending Accounts list, which associated setting must be the same across the selected accounts?

  A. Platform

  B. Connection Component

  C. CPM

  D. Vault

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Onboarding-Accounts-and-SSH-Keys.htm?Highlight=safe%20does%20not%20support%20properties

• Question 150:

  Due to network activity, ACME Corp's PrivateArk Server became active on the OR Vault while the Primary Vault was also running normally. All the components continued to point to the Primary Vault. Which steps should you perform to restore DR replication to normal?

  A. Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  B. Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  C. Shutdown PrivateArk Server on Primary Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  D. Shutdown PrivateArk Server on DR Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Upgrading-to-a-Distributed-Vaults-Environment-from-an-Active-Passive-Vault-DR-Environment.htm?Highlight=safe%20does%20not% 20support%20properties