CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 171:

  Which user(s) can access all passwords in the Vault?

  A. Administrator

  B. Any member of Vault administrators

  C. Any member of auditors

  D. Master

  Correct Answer: D

• Question 172:

  Which is the primary purpose of exclusive accounts?

  A. Reduced risk of credential theft

  B. More frequent password changes

  C. Non-repudiation (individual accountability)

  D. To force a collusion to commit' fraud ensuring no single actor may use a password without authorization

  Correct Answer: C

• Question 173:

  You are creating a shared safe for the help desk.

  What must be considered regarding the naming convention?

  A. Ensure the naming convention does not exceed 28 characters.

  B. Combine environments, owners and platforms to minimize the total number of safes created.

  C. Safe owners should determine the safe name to enable them to easily remember it.

  D. The word "Safe" cannot be used.

  Correct Answer: A

  https://cyberark-customers.force.com/s/article/Safe-Naming-Convention-Best-Practices

• Question 174:

  PSM captures a record of each command that was executed in Unix.

  A. TRIE

  B. FALSE

  Correct Answer: A

• Question 175:

  Which of the following components can be used to create a tape backup of the Vault?

  A. Disaster Recovery

  B. Distributed Vaults

  C. Replicate

  D. High Availability

  Correct Answer: C

• Question 176:

  What is the purpose of the CyberArk Event Notification Engine service?

  A. It sends email messages from the Central Policy Manager (CPM)

  B. It sends email messages from the Vault

  C. It processes audit report messages

  D. It makes Vault data available to components

  Correct Answer: D

• Question 177:

  Match the log file name with the CyberArk Component that generates the log.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PVWA-Logging.htm

• Question 178:

  DRAG DROP

  Match each PTA alert category with the PTA sensors that collect the data for it.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/What-Does-PTA-Detect.htm?TocPath=End%20User%7CSecurity%20Events%7C_____4

• Question 179:

  DRAG DROP

  Match each permission to where it can be found.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Safes-add-a-safe-member.htm?TocPath=Administration%7CPrivileged%20Accounts%7CAccess%20Control%7CSafes%20and%20Safe%20members% 7C_____3

• Question 180:

  DRAG DROP

  Match each component to its respective Log File location.

  Select and Place:

  

  Correct Answer:

  

  Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.1/en/Content/PAS%20INST/Optional-PSM-in-a-Vault-Disaster-Recovery-Site.htm?TocPath=Installation%7CInstall%20PAS%C2%A0on-premise%7CInstall%20PSM%7CAdvanced%

  20PSM%20Implementations%7C_____8

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.4/en/Content/PTA/PTA-Data-Locations.htm