CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 231:

  In the screenshot displayed, you just configured the usage in CyberArk and want to update its password. What is the least intrusive way to accomplish this?

  

  A. Use the "change" button on the usage's details page.
  B. Use the "change" button on the parent account's details page.
  C. Use the "sync" button on the usage's details page.
  D. Use the "reconcile" button on the parent account's details page.
  B. Use the "change" button on the parent account's details page.

• Question 232:

  DRAG DROP

  Match the built-in Vault User with the correct definition.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm?TocPath=Administration%7CUser%20Management%7C_____7

• Question 233:

  Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?

  A. They are added to the Pending Accounts list and can be reviewed and manually uploaded.
  B. They cannot be onboarded to the Password Vault.
  C. They must be uploaded using third party tools.
  D. They are not part of the Discovery Process.
  A. They are added to the Pending Accounts list and can be reviewed and manually uploaded.

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-accounts-discovery.htm

• Question 234:

  A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication. Which locations must you update?

  A. on the Vault server in Windows\System32\Etc\Hosts and in the PVWA Application under Administration > LDAP Integration > Directories > Hosts
  B. on the Vault server in Windows\System32\Etc\Hosts and on the PVWA server in Windows\System32\Etc\Hosts
  C. in the Private Ark client under Tools > Administrative Tools > Directory Mapping
  D. on the Vault server in the certificate store and on the PVWA server in the certificate store
  C. in the Private Ark client under Tools > Administrative Tools > Directory Mapping

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/LPLDAPIntegration.htm?TocPath=Administration%7CUser%20Management%7CTransparent%20user%20management%20using% 20LDAP%7C_____2

• Question 235:

  Which user(s) can access all passwords in the Vault?

  A. Administrator
  B. Any member of Vault administrators
  C. Any member of auditors
  D. Master
  D. Master

• Question 236:

  A Vault Administrator team member can log in to CyberArk, but for some reason, is not given Vault Admin rights. Where can you check to verify that the Vault Admins directory mapping points to the correct AD group?

  A. PVWA > User Provisioning > LDAP Integration > Mapping Criteria
  B. PVWA > User Provisioning > LDAP Integration > Map Name
  C. PVWA > Administration > LDAP Integration > Mappings
  D. PVWA > Administration > LDAP Integration > AD Groups
  C. PVWA > Administration > LDAP Integration > Mappings

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/LPLDAPIntegration.htm?TocPath=Administration%7CUser%20Management%7CTransparent%20user%20management%20using% 20LDAP%7C_____2

• Question 237:

  How do you create a cold storage backup?

  A. On the DR Vault, install PAReplicate according to the Installation guide, configure the logon ini file, and define the Schedule tasks for full and incremental backups.
  B. Install the Vault Backup utility on a different machine from the Enterprise Password Vault server and trigger the full backup.
  C. Configure the backup options in the PVWA.
  D. On the DR Vault, configure the cold storage backup path in TSParm.ini file.
  B. Install the Vault Backup utility on a different machine from the Enterprise Password Vault server and trigger the full backup.

• Question 238:

  As long as you are a member of the Vault Admins group you can grant any permission on any safe.

  A. TRUE
  B. FALSE
  B. FALSE

  ---

  Explanation/Reference:

  Being in Vault admins group only give you access to safes which are created during installation (safe created in installation process ) -This is clearly mentioned in documents .

• Question 239:

  The System safe allows access to the Vault configuration files.

  A. TRUE
  B. FALS
  A. TRUE

• Question 240:

  Which command configures email alerts within PTA if settings need to be changed post install?

  A. /opt/tomcat/utility/emailConfiguration.sh
  B. /opt/PTA/emailConfiguration.sh
  C. /opt/PTA/utility/emailConfig.sh
  D. /opt/tomcat/utility/emailSetup.sh
  A. /opt/tomcat/utility/emailConfiguration.sh

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PTA/Outbound-Sending-PTA-Alerts-to-Email.htm