CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 161:

  By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

  A. Vault Admins

  B. Security Admins

  C. Security Operators

  D. Auditors

  Correct Answer: B

• Question 162:

  A logon account can be specified in the platform settings.

  A. True

  B. False

  Correct Answer: A

• Question 163:

  When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA) and receive approval before being able to launch a secure connection via PSM for Windows (previously known as RDP Proxy).

  A. True

  B. False, a user can submit the request after the connection has already been initiated via the PSM for Windows

  Correct Answer: B

• Question 164:

  Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

  A. Suspected credential theft

  B. Over-Pass-The-Hash

  C. Golden Ticket

  D. Unmanaged privileged access

  Correct Answer: C

• Question 165:

  In your organization the "click to connect" button is not active by default. How can this feature be activated?

  A. Policies > Master Policy > Allow EPV transparent connections > Inactive

  B. Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception

  C. Policies > Master Policy > Allow EPV transparent connections > Active

  D. Policies > Master Policy > Password Management

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.1/en/Content/TranparentConnections_Web.htm

• Question 166:

  Which of the following logs contains information about errors related to PTA?

  A. ITAlog.log

  B. diamond.log

  C. pm_error.log

  D. WebApplication.log

  Correct Answer: B

• Question 167:

  In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

  A. True.

  B. False. Because the user can also enter credentials manually using Secure Connect.

  C. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSM Connect.

  D. False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

  Correct Answer: D

• Question 168:

  The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys. How are these keys managed?

  A. CyberArk stores Private keys in the Vault and updates Public keys on target systems.

  B. CyberArk stores Public keys in the Vault and updates Private keys on target systems.

  C. CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.

  D. CyberArk stores both Private and Public keys and can update target systems with either key.

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.4/en/Content/SSHKM/Using%20SSH%20Keys.htm

• Question 169:

  Which user is automatically added to all Safes and cannot be removed?

  A. Auditor

  B. Administrator

  C. Master

  D. Operator

  Correct Answer: C

• Question 170:

  One can create exceptions to the Master Policy based on ____________________.

  A. Safes

  B. Platforms

  C. Policies

  D. Accounts

  Correct Answer: D