CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 11:

  Which combination of Safe member permissions will allow end users to log in to a remote machine transparently but NOT show or copy the password?

  A. Use Accounts, Retrieve Accounts, List Accounts

  B. Use Accounts, List Accounts

  C. Use Accounts

  D. List Accounts, Retrieve Accounts

  Correct Answer: D

• Question 12:

  When running a "Privileged Accounts Inventory" Report through the Reports page in PVWA on a specific safe, which permission/s are required on that safe to show complete account inventory information?

  A. List Accounts, View Safe Members

  B. Manage Safe Owners

  C. List Accounts, Access Safe without confirmation

  D. Manage Safe, View Audit

  Correct Answer: A

• Question 13:

  Which of the following PTA detections are included in the Core PAS offering?

  A. Suspected Credential Theft

  B. Over-Pass-The Hash

  C. Golden Ticket

  D. Unmanaged Privileged Access

  Correct Answer: D

• Question 14:

  dbparm.ini is the main configuration file for the Vault.

  A. True

  B. False

  Correct Answer: A

• Question 15:

  What is the primary purpose of One Time Passwords?

  A. Reduced risk of credential theft

  B. More frequent password changes

  C. Non-repudiation (individual accountability)

  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

  Correct Answer: A

• Question 16:

  It is possible to control the hours of the day during which a user may log into the vault.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 17:

  What is the primary purpose of Dual Control?

  A. Reduced risk of credential theft

  B. More frequent password changes

  C. Non-repudiation (individual accountability)

  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

  Correct Answer: D

• Question 18:

  In PVWA, you are attempting to play a recording made of a session by user jsmith, but there is no option to "Fast Forward" within the video. It plays and only allows you to skip between commands instead. You are also unable to download the video.

  What could be the cause?

  A. Recording is of a PSM for SSH session.

  B. The browser you are using is out of date and needs an update to be supported.

  C. You do not have the "View Audit" permission on the safe where the account is stored.

  D. You need to update the recorder settings in the platform to enable screen capture every 10000 ms or less.

  Correct Answer: A

  Reference: https://cyberark-customers.force.com/s/article/00004935

• Question 19:

  What is the chief benefit of PSM?

  A. Privileged session isolation

  B. Automatic password management

  C. Privileged session recording

  D. `Privileged session isolation' and `Privileged session recording'

  Correct Answer: C

• Question 20:

  Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply.

  A. PSM connections to target devices that are not managed by CyberArk.

  B. Session Recording.

  C. Real-time live session monitoring.

  D. PSM connections from a terminal without the need to login to the PVWA.

  Correct Answer: ABC