CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 11:

  You are running a "Privileged Accounts Inventory" Report through the Reports page in PVWA on a specific safe. To show complete account inventory information, which permission/s are needed on that safe?

  A. List Accounts, View Safe Members
  B. Manage Safe Owners
  C. List Accounts, Access Safe without confirmation
  D. Manage Safe, View Audit
  A. List Accounts, View Safe Members

• Question 12:

  Which of the following components can be used to create a tape backup of the Vault?

  A. Disaster Recovery
  B. Distributed Vaults
  C. Replicate
  D. High Availability
  C. Replicate

• Question 13:

  Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

  A. Require dual control password access Approval
  B. Enforce check-in/check-out exclusive access
  C. Enforce one-time password access
  D. Enforce check-in/check-out exclusive access and Enforce one-time password access
  B. Enforce check-in/check-out exclusive access

• Question 14:

  SAFE Authorizations may be granted to____________. Select all that apply.

  A. Vault Users
  B. Vault Group
  C. LDAP Users
  D. LDAP Groups
  A. Vault Users
  B. Vault Group
  C. LDAP Users
  D. LDAP Groups

• Question 15:

  DRAG DROP

  Match each PTA alert category with the PTA sensors that collect the data for it.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/What-Does-PTA-Detect.htm?TocPath=End%20User%7CSecurity%20Events%7C_____4

• Question 16:

  The password upload utility must run from the CPM server

  A. TRUE
  B. FALSE
  B. FALSE

• Question 17:

  You created a new safe and need to ensure the user group cannot see the password, but can connect through the PSM. Which safe permissions must you grant to the group? (Choose two.)

  A. List Accounts
  B. Use Accounts
  C. Access Safe without Confirmation
  D. Retrieve Files
  E. Confirm Request
  A. List Accounts
  B. Use Accounts

• Question 18:

  DRAG DROP

  For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PSM/psm_healthcheck.htm?TocPath=Set%20up%20customized%20authentication%20modules%7CBefore%20You%20Install%7CInstalling%20the%20PAS%C2%A0Solution%7CCentral%20Policy%20Manager%7CPSM%20Hardening%20Stage%7C_____3

• Question 19:

  The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys. How are these keys managed?

  A. CyberArk stores Private keys in the Vault and updates Public keys on target systems.
  B. CyberArk stores Public keys in the Vault and updates Private keys on target systems.
  C. CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.
  D. CyberArk stores both Private and Public keys and can update target systems with either key.
  A. CyberArk stores Private keys in the Vault and updates Public keys on target systems.

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.4/en/Content/SSHKM/Using%20SSH%20Keys.htm

• Question 20:

  You are configuring CyberArk to use HTML5 gateways exclusively for PSM connections.

  In the PVWA, where do you set DefaultConnectionMethod to HTML5?

  A. Options > Privileged Session Management UI
  B. Options > Privileged Session Management
  C. Options > Privileged Session Management Defaults
  D. Options > Privileged Session Management Interface
  A. Options > Privileged Session Management UI