CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 211:

  What is the name of the Platform parameters that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

  A. Min Validity Period

  B. Interval

  C. Immediate Interval

  D. Timeout

  Correct Answer: A

  Min Validity Period -The number of minutes to wait from the last retrieval of the password until it is replaced. This gives the user a minimum period to be able to use the password before it is replaced. Use -1 to ignore this property. This parameter is also used to release exclusive accounts automatically Interval ? The number of minutes that the Central Policy Manager waits between running periodic searches for the platform. Note: It is recommended to leave the default value of 1440. If a change/verify policy has been configured, the Central Policy Manager will automatically align the periodic searches with the start of the defined timeframes."

• Question 212:

  To manage automated onboarding rules, a CyberArk user must be a member of which group?

  A. Vault Admins

  B. CPM User

  C. Auditors

  D. Administrators

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/automatic_onboarding_rules.htm#:~:text=To%20manage%20onboarding%20rules%2C%20users,to%20the%20Vault%20admins%20group

• Question 213:

  A newly created platform allows users to access a Linux endpoint. When users click to connect, nothing happens. Which piece of the platform is missing?

  A. PSM-SSH Connection Component

  B. UnixPrompts.ini

  C. UnixProcess.ini

  D. PSM-RDP Connection Component

  Correct Answer: A

• Question 214:

  For a safe with Object Level Access enabled you can turn off Object Level Access Control when it no longer needed on the safe.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 215:

  You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account's password the CPM will.....

  A. Log in to the system as root, then change root's password

  B. Log in to the system as the logon account, then change roofs password

  C. Log in to the system as the logon account, run the su command to log in as root, and then change root's password.

  D. None of these

  Correct Answer: C

• Question 216:

  What is the purpose of the PrivateArk Server service?

  A. Executes password changes

  B. Maintains Vault metadata

  C. Makes Vault data accessible to components

  D. Sends email alerts from the Vault

  Correct Answer: C

• Question 217:

  To enable the Automatic response "Add to Pending" within PTA when unmanaged credentials are found, what are the minimum permissions required by PTAUser for the PasswordManager_pending safe?

  A. List Accounts, View Safe members, Add accounts (includes update properties), Update Account content, Update Account properties

  B. List Accounts, Add accounts (includes update properties), Delete Accounts, Manage Safe

  C. Add accounts (includes update properties), Update Account content, Update Account properties, View Audit D. View Accounts, Update Account content, Update Account properties, Access Safe without confirmation, Manage Safe, View Audit

  Correct Answer: A

• Question 218:

  Which report could show all accounts that are past their expiration dates?

  A. Privileged Account Compliance Status report

  B. Activity log

  C. Privileged Account Inventory report

  D. Application Inventory report

  Correct Answer: A

• Question 219:

  A Reconcile Account can be specified in the Master Policy.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 220:

  Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.

  A. TRUE

  B. FALSE

  Correct Answer: B