CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 221:

  PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

  A. True
  B. False, the PTA can suspend sessions whether the session is made via the PSM or not
  B. False, the PTA can suspend sessions whether the session is made via the PSM or not

• Question 222:

  Which Vault authorization does a user need to have assigned to able to generate the "Entitlement Report" from the reports page in PVWA? (Choose two.)

  A. Manage Users
  B. Audit Users
  C. Read Activity
  D. View Entitlements
  E. List Accounts
  D. View Entitlements
  E. List Accounts

• Question 223:

  Where can a user with the appropriate permissions generate a report? (Choose two.)

  A. PVWA > Reports
  B. PrivateArk Client
  C. Cluster Vault Manager
  D. PrivateArk Server Monitor
  E. PARClient
  A. PVWA > Reports
  B. PrivateArk Client

• Question 224:

  What is the configuration file used by the CPM scanner when scanning UNIX/Linux devices?

  A. UnixPrompts.ini
  B. plink.exe
  C. dbparm.ini
  D. PVConfig.xml
  A. UnixPrompts.ini

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/PASIMP/PVWA-Accounts-Feed.htm#:~:text=When%20scanning%20Unix%2FLinux%20devices,ini%20configuration%20file

• Question 225:

  In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

  A. True.
  B. False. Because the user can also enter credentials manually using Secure Connect.
  C. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSM Connect.
  D. False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.
  D. False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

• Question 226:

  You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account's password the CPM will.....

  A. Log in to the system as root, then change root's password
  B. Log in to the system as the logon account, then change roofs password
  C. Log in to the system as the logon account, run the su command to log in as root, and then change root's password.
  D. None of these
  C. Log in to the system as the logon account, run the su command to log in as root, and then change root's password.

• Question 227:

  When a group is granted the 'Authorize Account Requests' permission on a safe Dual Control requests must be approved by

  A. Any one person from that group
  B. Every person from that group
  C. The number of persons specified by the Master Policy
  D. That access cannot be granted to groups
  C. The number of persons specified by the Master Policy

• Question 228:

  DRAG DROP

  Match each automatic remediation to the correct PTA security event.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 229:

  Which is the primary purpose of exclusive accounts?

  A. Reduced risk of credential theft
  B. More frequent password changes
  C. Non-repudiation (individual accountability)
  D. To force a collusion to commit' fraud ensuring no single actor may use a password without authorization
  C. Non-repudiation (individual accountability)

• Question 230:

  Secure Connect provides the following. Choose all that apply.

  A. PSM connections to target devices that are not managed by CyberArk.
  B. Session Recording
  C. Real-time live session monitoring.
  D. PSM connections from a terminal without the need to login to the PVWA
  A. PSM connections to target devices that are not managed by CyberArk.
  B. Session Recording