CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 231:

  Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

  A. Discovery and Audit (DMA)

  B. Auto Detection (AD)

  C. Export Vault Data (EVD)

  D. On Demand Privileges Manager (OPM)

  E. Accounts Discovery

  Correct Answer: ABE

• Question 232:

  You are creating a Dual Control workflow for a team's safe. Which safe permissions must you grant to the Approvers group?

  A. List accounts, Authorize account request

  B. Retrieve accounts, Access Safe without confirmation

  C. Retrieve accounts, Authorize account request

  D. List accounts, Unlock accounts

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PVWA-Dual-Control.htm (expand all and search for retrieve accounts)

• Question 233:

  You receive this error:

  "Error in changepass to user domain\user on domain server(\domain.(winRc=5) Access is denied."

  Which root cause should you investigate?

  A. The account does not have sufficient permissions to change its own password.

  B. The domain controller is unreachable.

  C. The password has been changed recently and minimum password age is preventing the change.

  D. The CPM service is disabled and will need to be restarted.

  Correct Answer: A

  Reference: https://cyberark-customers.force.com/s/article/CPM-can-login-and-verify-a-password-but-can-t-change-the-password-winRc-5-Access-is-denied

• Question 234:

  What is the purpose of a linked account?

  A. To ensure that a particular collection of accounts all have the same password.

  B. To ensure a particular set of accounts all change at the same time.

  C. To connect the CPNI to a target system.

  D. To allow more than one account to work together as part of a password management process.

  Correct Answer: D

• Question 235:

  In the Private Ark client, how do you add an LDAP group to a CyberArk group?

  A. Select Update on the CyberArk group, and then click Add > LDAP Group

  B. Select Update on the LDAP Group, and then click Add > LDAP Group

  C. Select Member Of on the CyberArk group, and then click Add > LDAP Group

  D. Select Member Of on the LDAP group, and then click Add > LDAP Group

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/LPLDAPIntegration.htm?TocPath=Administration%7CUser%20Management%7CTransparent%20user%20management%20using% 20LDAP%7C_____2

• Question 236:

  It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur

  A. TRUE

  B. FALSE

  Correct Answer: A

  Password verification can be restricted to specific days. This means that the CPM will only verify passwords on the days of the week specified in the VFExecutionDays parameter. The days of the week are represented by the first 3 letters of the name of the day. Sunday is represented by Sun, Monday by Mon, etc.

• Question 237:

  Users who have the 'Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 238:

  When a group is granted the 'Authorize Account Requests' permission on a safe Dual Control requests must be approved by

  A. Any one person from that group

  B. Every person from that group

  C. The number of persons specified by the Master Policy

  D. That access cannot be granted to groups

  Correct Answer: C

• Question 239:

  Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed.

  A. HeadStartInterval

  B. Interval

  C. ImmediateInterval

  D. The CPM does not change the password under this circumstance

  Correct Answer: C

• Question 240:

  Which one the following reports is NOT generated by using the PVWA?

  A. Accounts Inventory

  B. Application Inventory

  C. Sales List

  D. Convince Status

  Correct Answer: C