CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 191:

  To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?

  A. List Accounts, Use Accounts

  B. List Accounts, Use Accounts, Retrieve Accounts

  C. Use Accounts

  D. List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PSSO-PSMConnecPVWA.htm?TocPath=End%20User%7CConnect%20to%20Accounts%7CPrivileged%20Single%20Sign-On%7C_____2

• Question 192:

  In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.

  A. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server's root account.

  B. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.

  C. Configure the Unix system to allow SSH logins.

  D. Configure the CPM to allow SSH logins.

  Correct Answer: B

• Question 193:

  You are logging into CyberArk as the Master user to recover an orphaned safe. Which items are required to log in as Master?

  A. Master CD, Master Password, console access to the Vault server, Private Ark Client

  B. Operator CD, Master Password, console access to the PVWA server, PVWA access

  C. Operator CD, Master Password, console access to the Vault server, Recover.exe

  D. Master CD, Master Password, console access to the PVWA server, Recover.exe

  Correct Answer: A

  Reference: https://cyberark-customers.force.com/s/article/How-to-log-in-as-the-Master-user

• Question 194:

  A user is receiving the error message "ITATS006E Station is suspended for User jsmith" when attempting to sign into the Password Vault Web Access (PVWA). Which utility would a Vault administrator use to correct this problem?

  A. createcredfile.exe

  B. cavaultmanager.exe

  C. PrivateArk

  D. PVWA

  Correct Answer: C

• Question 195:

  In the Private Ark client under the Tools menu > Administrative Tools > Users and Groups, which option do you use to update users' Vault group memberships?

  A. Update > General tab

  B. Update > Authorizations tab

  C. Update > Member Of tab

  D. Update > Group tab

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm?TocPath=Administration%7CUser%20Management%7C_____7

• Question 196:

  The password upload utility must run from the CPM server

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 197:

  A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

  A. True

  B. False

  Correct Answer: B

• Question 198:

  tsparm.ini is the main configuration file for the Vault.

  A. True

  B. False

  Correct Answer: B

• Question 199:

  What is the purpose of the PrivateArk Database service?

  A. Communicates with components

  B. Sends email alerts from the Vault

  C. Executes password changes

  D. Maintains Vault metadata

  Correct Answer: D

• Question 200:

  VAULT authorizations may be granted to_____.

  A. Vault Users

  B. Vault Groups

  C. LDAP Users

  D. LDAP Groups

  Correct Answer: C