CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 161:

  Which change could CyberArk make to the REST API that could cause existing scripts to fail?

  A. adding optional parameters in the request
  B. adding additional REST methods
  C. removing parameters
  D. returning additional values in the response
  C. removing parameters

• Question 162:

  What must you specify when configuring a discovery scan for UNIX? (Choose two.)

  A. Vault Administrator
  B. CPM Scanner
  C. root password for each machine
  D. list of machines to scan
  E. safe for discovered accounts
  B. CPM Scanner
  D. list of machines to scan

• Question 163:

  What are common ways that organizations leverage the CyberArk Blueprint for Identity Security Success? (Choose three.)

  A. to understand the identity attack chain
  B. to discover all digital identities
  C. to describe the explicit order of operations for Identity Security
  D. to assess an organization's security posture
  E. to build an Identity Security roadmap
  F. to secure their human identities
  A. to understand the identity attack chain
  D. to assess an organization's security posture
  E. to build an Identity Security roadmap

• Question 164:

  Refer to the exhibit.

  

  Why is user "EMEALevel2Support" unable to change the password for user "Operator"?

  A. EMEALevel2Support's hierarchy level is not the same or higher than Operator.
  B. EMEALevel2Support does not have the "Manage Directory Mapping" role.
  C. Operator can only be reset by the Master user.
  D. EMEALevel2Support does not have rights to reset passwords for other users.
  C. Operator can only be reset by the Master user.

• Question 165:

  Which service should NOT be running on the DR Vault when the primary Production Vault is up?

  A. PrivateArk Database
  B. PrivateArk Server
  C. CyberArk Vault Disaster Recovery (DR) service
  D. CyberArk Logical Container
  B. PrivateArk Server

• Question 166:

  In a rule using "Privileged Session Analysis and Response" in PTA, which session options are available to configure as responses to activities?

  A. Suspend, Terminate, None
  B. Suspend, Terminate, Lock Account
  C. Pause, Terminate, None
  D. Suspend, Terminate
  A. Suspend, Terminate, None

• Question 167:

  What is the correct process to install a custom platform from the CyberArk Marketplace?

  A. Locate the custom platform in the Marketplace and click Import.
  B. Download the platform from the Marketplace and import it using the PVWA.
  C. Contact CyberArk Support for guidance on how to import the platform.
  D. Duplicate an existing platform and align the setting to match the platform from the Marketplace.
  B. Download the platform from the Marketplace and import it using the PVWA.

• Question 168:

  For Digital Vault Cluster in a high availability configuration, how does the cluster determine if a node is down?

  A. The heartbeat s no longer detected on the private network.
  B. The shared storage array is offline.
  C. An alert is generated in the Windows Event log.
  D. The Digital Vault Cluster does not detect a node failure.
  A. The heartbeat s no longer detected on the private network.

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the-CyberArk-Digital-Cluster-Vault-Server.htm?TocPath=Administration%7CComponents%7CDigital%20Vault%7COperate%20the% 20CyberArk%20Vault%7CCyberArk%20HighAvailability%20Vault%20Cluster%7C_____1

• Question 169:

  Which setting in the Master Policy controls whether PSM is enabled and sessions will be recorded?

  A. Require privileged session monitoring and isolation = inactive; Record and save session activity = active
  B. Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive
  C. Require privileged session monitoring and isolation = active; Record and save session activity = active
  D. Require privileged session monitoring and isolation = active; Record and save session activity = inactive
  C. Require privileged session monitoring and isolation = active; Record and save session activity = active

• Question 170:

  Which combination of Safe member permissions will allow end users to log in to a remote machine transparently but NOT show or copy the password?

  A. Use Accounts, Retrieve Accounts, List Accounts
  B. Use Accounts, List Accounts
  C. Use Accounts
  D. List Accounts, Retrieve Accounts
  D. List Accounts, Retrieve Accounts