CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 241:

  The System safe allows access to the Vault configuration files.

  A. TRUE

  B. FALS

  Correct Answer: A

• Question 242:

  As long as you are a member of the Vault Admins group you can grant any permission on any safe.

  A. TRUE

  B. FALSE

  Correct Answer: B

  Being in Vault admins group only give you access to safes which are created during installation (safe created in installation process ) -This is clearly mentioned in documents .

• Question 243:

  A user with administrative privileges to the vault can only grant other users privileges that he himself has.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 244:

  All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group Operations Staff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of Operations Managers never need to be able to use the show, copy or connect buttons themselves.

  Which safe permission do you need to grant Operations Staff? Check all that apply.

  A. Use Accounts

  B. Retrieve Accounts

  C. Authorize Password Requests

  D. Access Safe without Authorization

  Correct Answer: ABC

• Question 245:

  A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings. What is the issue?

  A. The user must login as PSMAdminConnect

  B. The PSM service is not running

  C. The user is not a member of the PVWAMonitor group

  D. The user is not a member of the Auditors group

  Correct Answer: D

• Question 246:

  When creating an onboarding rule, it will be executed upon .

  A. All accounts in the pending accounts list

  B. Any future accounts discovered by a discovery process

  C. Both "All accounts in the pending accounts list" and "Any future accounts discovered by a discovery process"

  Correct Answer: B

• Question 247:

  DRAG DROP

  ADR Vault became active due to a failure of the primary Vault. Service on the primary Vault has now been restored. Arrange the steps to return the DR vault to its normal standby mode in the correct sequence.

  Select and Place:

  

  Correct Answer:

  

  1.

  Stop the Vault Server using the PrivateArk Server Administration Console (For HA Vault, use the Cluster Administrator) and confirm that the Cyberark Event Notification Engine service has been stopped via the services.msc console.

  2.

  Set the “FailoverMode” variable in \Program Files (x86)\Privateark\padr\padr.ini to No.

  3.

  Delete the following two entries in the padr.ini: NextBinaryLogNumberToStartAt, LastDataReplicationTimestamp

  4.

  Start “CyberArk Disaster Recovery service”

  5.

  Check \Program Files (x86)\Privateark\padr\padr.log to make sure replication is successful from Production Vault to DR Vault.

• Question 248:

  DRAG DROP

  A new HTML5 Gateway has been deployed in your organization.

  From the PVWA, arrange the steps to configure a PSM host to use the HTML5 Gateway in the correct sequence.

  Select and Place:

  

  Correct Answer:

  

• Question 249:

  DRAG DROP

  Match the Status of Services on a DR Vault to what is displayed when it is operating normally in Replication mode.

  Select and Place:

  

  Correct Answer:

  

• Question 250:

  DRAG DROP

  Match each automatic remediation to the correct PTA security event.

  Select and Place:

  

  Correct Answer: