CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 181:

  If PTA is integrated with a supported SIEM solution, which detection becomes available?

  A. unmanaged privileged account
  B. privileged access to the Vault during irregular days
  C. riskySPN
  D. exposed credentials
  A. unmanaged privileged account

• Question 182:

  In the Private Ark client under the Tools menu > Administrative Tools > Users and Groups, which option do you use to update users' Vault group memberships?

  A. Update > General tab
  B. Update > Authorizations tab
  C. Update > Member Of tab
  D. Update > Group tab
  C. Update > Member Of tab

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm?TocPath=Administration%7CUser%20Management%7C_____7

• Question 183:

  Users are unable to launch Web Type Connection components from the PSM server. Your manager asked you to open the case with CyberArk Support. Which logs will help the CyberArk Support Team debug the issue? (Choose three.)

  A. PSMConsole.log
  B. PSMDebug.log
  C. PSMTrace.log
  D. .Component.log
  E. PMconsole.log
  F. ITAlog.log
  B. PSMDebug.log
  C. PSMTrace.log
  F. ITAlog.log

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.6/en/Content/PSMC/PSMC_Troubleshooting.htm

• Question 184:

  What is required to enable access over SSH to a Unix account through both PSM and PSMP?

  A. The platform must contain connection components for PSM-SSH and PSMP-SSH.
  B. PSM and PSMP must already have stored the SSH Fingerprint for the Unix host.
  C. The 'Enable PSMP' setting in the Unix platform must be set to Yes.
  D. A duplicate platform (Called ) with the PSMP settings must be created.
  A. The platform must contain connection components for PSM-SSH and PSMP-SSH.

• Question 185:

  Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed.

  A. HeadStartInterval
  B. Interval
  C. ImmediateInterval
  D. The CPM does not change the password under this circumstance
  C. ImmediateInterval

• Question 186:

  You have been asked to turn off the time access restrictions for a safe.

  Where is this setting found?

  A. PrivateArk
  B. RestAPI
  C. Password Vault Web Access (PVWA)
  D. Vault
  A. PrivateArk

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/Advanced-Safe-Management.htm

• Question 187:

  If a user is a member of more than one group that has authorizations on a safe, by default that user is granted________.

  A. the vault will not allow this situation to occur.
  B. only those permissions that exist on the group added to the safe first.
  C. only those permissions that exist in all groups to which the user belongs.
  D. the cumulative permissions of all groups to which that user belongs.
  B. only those permissions that exist on the group added to the safe first.

• Question 188:

  Where can you assign a Reconcile account? (Choose two.)

  A. in PVWA at the account level
  B. in PVWA in the platform configuration
  C. in the Master policy of the PVWA
  D. at the Safe level
  E. in the CPM settings
  A. in PVWA at the account level
  B. in PVWA in the platform configuration

• Question 189:

  Which Automatic Remediation is configurable for a PTA detection of a "Suspected Credential Theft"?

  A. Add to Pending
  B. Rotate Credentials
  C. Reconcile Credentials
  D. Disable Account
  B. Rotate Credentials

  ---

  Explanation/Reference:

  https://docs.cyberark.com/PAS/13.0/en/Content/PTA/Security-Configuration.htm?TocPath=End%20user%7CSecurity%20Events%7C_____3

• Question 190:

  Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.

  A. TRUE
  B. FALSE
  B. FALSE