CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 211:

  tsparm.ini is the main configuration file for the Vault.

  A. True
  B. False
  B. False

• Question 212:

  What can you do to ensure each component server is operational?

  A. Logon to PVWA with v10 UI, navigate to Healthcheck, and validate each component server is connected to the Vault.
  B. Ping each component server to ensure connectivity.
  C. Use the PrivateArk client to connect to the Vault server and validate all the services are running.
  D. Install the Vault Server interface on a remote machine to avoid interactive logon to the Vault OS and review the ITALog.log through the Vault Server interface.
  A. Logon to PVWA with v10 UI, navigate to Healthcheck, and validate each component server is connected to the Vault.

• Question 213:

  You are troubleshooting a PVWA slow response. Which log files should you analyze first? (Choose two.)

  A. ITALog.log
  B. web.config
  C. CyberArk.WebApplication.log
  D. CyberArk.WebConsole.log
  C. CyberArk.WebApplication.log
  D. CyberArk.WebConsole.log

• Question 214:

  What is the chief benefit of PSM?

  A. Privileged session isolation
  B. Automatic password management
  C. Privileged session recording
  D. `Privileged session isolation' and `Privileged session recording'
  C. Privileged session recording

• Question 215:

  Which statement is true about setting the reconcile account at the platform level?

  A. This is the only way to enable automatic reconciliation of account passwords.
  B. CPM performance will be improved when the reconcile account is set at the platform level.
  C. A rule can be used to specify the reconcile account dynamically or a specific reconcile account can be selected.
  D. This configuration prevents the association from becoming broken if the reconcile account is moved to a different safe.
  C. A rule can be used to specify the reconcile account dynamically or a specific reconcile account can be selected.

• Question 216:

  Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that apply.

  A. PAR Agent
  B. PrivateArk Server Central Administration
  C. Edit DBParm.ini in a text editor.
  D. Setup.exe
  A. PAR Agent
  B. PrivateArk Server Central Administration

  ---

  Explanation/Reference:

  PAR-Private Ark Remote Control Agent allows you to perform several Vault admin tasks (without restarting the Vault) and view machine statistics.

• Question 217:

  You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe Team1.

  What do you need to recover and decrypt the object? (Choose three.)

  A. Recovery Private Key
  B. Recover.exe
  C. Vault data
  D. Recovery Public Key
  E. Server Key
  F. Master Password
  A. Recovery Private Key
  D. Recovery Public Key
  E. Server Key

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Server-Keys.htm?TocPath=Administration%7CComponents%7CDigital%20Vault%7CAdvanced%20Digital%20Vault%20Environment% 7CCyberArk%20Vault%20Structure%7C_____3

• Question 218:

  When managing SSH keys, the CPM stored the Private Key

  A. In the Vault
  B. On the target server
  C. A and B
  D. Nowhere because the private key can always be generated from the public key.
  A. In the Vault

• Question 219:

  An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?

  A. PSMConnect
  B. PSMMaster
  C. PSMGwUser
  D. PSMAdminConnect
  D. PSMAdminConnect

• Question 220:

  When creating an onboarding rule, it will be executed upon .

  A. All accounts in the pending accounts list
  B. Any future accounts discovered by a discovery process
  C. Both "All accounts in the pending accounts list" and "Any future accounts discovered by a discovery process"
  B. Any future accounts discovered by a discovery process