CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 241:

  You are configuring a Vault HA cluster.

  Which file should you check to confirm the correct drives have been assigned for the location of the Quorum and Safes data disks?

  A. ClusterVault.ini
  B. my.ini
  C. vault.ini
  D. DBParm.ini
  A. ClusterVault.ini

• Question 242:

  Which master policy settings ensure non-repudiation?

  A. Require password verification every X days and enforce one-time password access.
  B. Enforce check-in/check-out exclusive access and enforce one-time password access.
  C. Allow EPV transparent connections ('Click to connect') and enforce check-in/check-out exclusive access.
  D. Allow EPV transparent connections ('Click to connect') and enforce one-time password access.
  B. Enforce check-in/check-out exclusive access and enforce one-time password access.

• Question 243:

  A Reconcile Account can be specified in the Master Policy.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 244:

  The Password upload utility can be used to create safes.

  A. TRUE
  B. FALS
  A. TRUE

• Question 245:

  You have been asked to secure a set of shared accounts in CyberArk whose passwords will need to be used by end users. The account owner wants to be able to track who was using an account at any given moment.

  Which security configuration should you recommend?

  A. Configure one-time passwords for the appropriate platform in Master Policy.
  B. Configure shared account mode on the appropriate safe.
  C. Configure both one-time passwords and exclusive access for the appropriate platform in Master Policy.
  D. Configure object level access control on the appropriate safe.
  C. Configure both one-time passwords and exclusive access for the appropriate platform in Master Policy.

• Question 246:

  When an account is unable to change its own password, how can you ensure that password reset with the reconcile account is performed each time instead of a change?

  A. Set the parameter RCAllowManualReconciliation to Yes.
  B. Set the parameter ChangePasswordinResetMade to Yes.
  C. Set the parameter IgnoreReconcileOnMissingAccount to No.
  D. Set the UnlockUserOnReconcile to Yes.
  B. Set the parameter ChangePasswordinResetMade to Yes.

• Question 247:

  Which item is an option for PSM recording customization?

  A. Windows events text recorder with automatic play-back
  B. Windows events text recorder and universal keystrokes recording simultaneously
  C. Universal keystrokes text recorder with windows events text recorder disabled
  D. Custom audio recording for windows events
  C. Universal keystrokes text recorder with windows events text recorder disabled

• Question 248:

  What is the purpose of the HeadStartlnterval setting m a platform?

  A. It determines how far in advance audit data is collected tor reports
  B. It instructs the CPM to initiate the password change process X number of days before expiration.
  C. It instructs the AIM Provider to `skip the cache' during the defined time period
  D. It alerts users of upcoming password changes x number of days before expiration.
  B. It instructs the CPM to initiate the password change process X number of days before expiration.

  ---

  Explanation/Reference:

  The number of days before the password expires (according to the ExpirationPeriod parameter) that the CPM will initiate a password change process. This parameter is not relevant if the policy will be applied to a member of an account group.

• Question 249:

  How much disk space do you need on a server to run a full replication with PAReplicate?

  A. 500 GB
  B. 1 TB
  C. same as disk size on Satellite Vault
  D. at least the same disk size as the Primary Vault
  D. at least the same disk size as the Primary Vault

• Question 250:

  Which dependent accounts does the CPM support out-of-the-box? (Choose three.)

  A. Solaris Configuration file
  B. Windows Services
  C. Windows Scheduled Tasks
  D. Windows DCOM Applications
  E. Windows Registry
  F. Key Tab file
  B. Windows Services
  C. Windows Scheduled Tasks
  E. Windows Registry