CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 221:

  Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

  A. Password change

  B. Password reconciliation

  C. Session suspension

  D. Session termination

  Correct Answer: A

• Question 222:

  Which Automatic Remediation is configurable for a PTA detection of a "Suspected Credential Theft"?

  A. Add to Pending

  B. Rotate Credentials

  C. Reconcile Credentials

  D. Disable Account

  Correct Answer: B

  https://docs.cyberark.com/PAS/13.0/en/Content/PTA/Security-Configuration.htm?TocPath=End%20user%7CSecurity%20Events%7C_____3

• Question 223:

  Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

  A. PSM (i.e., launching connections by clicking on the "Connect" button in the PVWA)

  B. PSM for Windows (previously known as RDP Proxy)

  C. PSM for SSH (previously known as PSM SSH Proxy)

  D. All of the above

  Correct Answer: A

• Question 224:

  The primary purpose of exclusive accounts is to ensure non-repudiation (Individual accountability).

  A. TRUE

  B. FALS

  Correct Answer: A

• Question 225:

  Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

  A. Require dual control password access Approval

  B. Enforce check-in/check-out exclusive access

  C. Enforce one-time password access

  D. Enforce check-in/check-out exclusive access and Enforce one-time password access

  Correct Answer: B

• Question 226:

  Which report shows the accounts that are accessible to each user?

  A. Activity report

  B. Entitlement report

  C. Privileged Accounts Compliance Status report

  D. Applications Inventory report

  Correct Answer: B

• Question 227:

  Users can be resulted to using certain CyberArk interfaces (e.g.PVWA or PACLI).

  A. TRUE

  B. FALS

  Correct Answer: A

• Question 228:

  A Vault administrator have associated a logon account to one of their Unix root accounts in the vault. When attempting to verify the root account's password the Central Policy Manager (CPM) will:

  A. ignore the logon account and attempt to log in as root

  B. prompt the end user with a dialog box asking for the login account to use

  C. log in first with the logon account, then run the SU command to log in as root using the password in the Vault D. none of these

  Correct Answer: B

• Question 229:

  You need to enable the PSM for all platforms. Where do you perform this task?

  A. Platform Management > (Platform) > UI and Workflows

  B. Master Policy > Session Management

  C. Master Policy > Privileged Access Workflows

  D. Administration > Options > Connection Components

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Customizing-PSM-for-Specific-Platforms.htm?TocPath=Administration%7CComponents%7CPrivileged%20Session%20Manager% 7CConfiguration%7C_____8

• Question 230:

  To ensure all sessions are being recorded, a CyberArk administrator goes to the master policy and makes configuration changes. Which configuration is correct?

  A. Require privileged session monitoring and isolation = inactive; Record and save session activity = active.

  B. Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive.

  C. Require privileged session monitoring and isolation = active; Record and save session activity = active.

  D. Require privileged session monitoring and isolation = active; Record and save session activity = inactive.

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring-Recordings-and-Audits-in-PSM.htm