CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 201:

  Which command generates a full backup of the Vault?

  A. PAReplicate.exe Vault.ini /LogonFromFile user.ini /FullBackup
  B. PAPreBackup.exe C:\PrivateArk\Server\Conf\Vault.ini Backup/Asdf1234 /full
  C. PARestore.exe PADR ini /LogonFromFile vault.ini /FullBackup
  D. CAVaultManager.exe RecoverBackupFiles /BackupPoolName BkpSvr1
  A. PAReplicate.exe Vault.ini /LogonFromFile user.ini /FullBackup

• Question 202:

  For a safe with Object Level Access enabled you can turn off Object Level Access Control when it no longer needed on the safe.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 203:

  Which of the following logs contains information about errors related to PTA?

  A. ITAlog.log
  B. diamond.log
  C. pm_error.log
  D. WebApplication.log
  B. diamond.log

• Question 204:

  If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

  A. Configure the Provider to change the password to match the Vault's Password
  B. Associate a reconcile account and configure the platform to reconcile automatically
  C. Associate a logon account and configure the platform to reconcile automatically
  D. Run the correct auto detection process to rediscover the password
  B. Associate a reconcile account and configure the platform to reconcile automatically

• Question 205:

  DRAG DROP

  Match the Status of Services on a DR Vault to what is displayed when it is operating normally in Replication mode.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 206:

  Which one the following reports is NOT generated by using the PVWA?

  A. Accounts Inventory
  B. Application Inventory
  C. Sales List
  D. Convince Status
  C. Sales List

• Question 207:

  To change the safe where recordings are kept for a specific platform, which setting must you update in the platform configuration?

  A. SessionRecorderSafe
  B. SessionSafe
  C. RecordingsPath
  D. RecordingLocation
  A. SessionRecorderSafe

• Question 208:

  When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA) and receive approval before being able to launch a secure connection via PSM for Windows (previously known as RDP Proxy).

  A. True
  B. False, a user can submit the request after the connection has already been initiated via the PSM for Windows
  B. False, a user can submit the request after the connection has already been initiated via the PSM for Windows

• Question 209:

  Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

  A. Password change
  B. Password reconciliation
  C. Session suspension
  D. Session termination
  A. Password change

• Question 210:

  Which CyberArk utility allows you to create lists of Master Policy Settings, owners and safes for output to text files or MSSQL databases?

  A. Export Vault Data
  B. Export Vault Information
  C. PrivateArk Client
  D. Privileged Threat Analytics
  A. Export Vault Data

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/EVD/Exporting-Data-to-Files.htm?Highlight=evd%20italog