CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 21:

  Which usage can be added as a service account platform?

  A. Kerberos Tokens

  B. IIS Application Pools

  C. PowerShell Libraries

  D. Loosely Connected Devices

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/LooselyConnectedDevices.htm

• Question 22:

  When a DR Vault Server becomes an active vault, it will automatically fail back to the original state once the Primary Vault comes back online.

  A. True; this is the default behavior

  B. False; this is not possible

  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file

  D. True, if the AllowFailback setting is set to "yes" in the dbparm.ini file

  Correct Answer: B

• Question 23:

  PSM for Windows (previously known as "RDP Proxy") supports connections to the following target systems

  A. Windows

  B. UNIX

  C. Oracle

  D. All of the above

  Correct Answer: A

• Question 24:

  What is the purpose of the Immediate Interval setting in a CPM policy?

  A. To control how often the CPM looks for System Initiated CPM work.

  B. To control how often the CPM looks for User Initiated CPM work.

  C. To control how often the CPM rests between password changes.

  D. To Control the maximum amount of time the CPM will wait for a password change to complete.

  Correct Answer: B

  When the Master Policy enforces check-in/check-out exclusive access, passwords are changed when the user clicks the Release button and releases the account. This is based on the ImmediateInterval parameter in the applied platform. If the user forgets to release the account, it is automatically released and changed by the CPM after a predetermined number of minutes, defined in the MinValidityPeriod parameter specified in the platform

• Question 25:

  Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 26:

  A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication. Which locations must you update?

  A. on the Vault server in Windows\System32\Etc\Hosts and in the PVWA Application under Administration > LDAP Integration > Directories > Hosts

  B. on the Vault server in Windows\System32\Etc\Hosts and on the PVWA server in Windows\System32\Etc\Hosts

  C. in the Private Ark client under Tools > Administrative Tools > Directory Mapping

  D. on the Vault server in the certificate store and on the PVWA server in the certificate store

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/LPLDAPIntegration.htm?TocPath=Administration%7CUser%20Management%7CTransparent%20user%20management%20using% 20LDAP%7C_____2

• Question 27:

  When on-boarding account using Accounts Feed, Which of the following is true?

  A. You must specify an existing Safe where are account will be stored when it is on boarded to the Vault

  B. You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.

  C. You can specify the name of a new Platform that will be created and associated with the account

  D. Any account that is on boarded can be automatically reconciled regardless of the platform it is associated with.

  Correct Answer: B

• Question 28:

  Which of the following Privileged Session Management (PSM) solutions support live monitoring of active sessions?

  A. PSM (i.e., launching connections by clicking on the connect button in the Password Vault Web Access (PVWA)

  B. PSM for Windows (previously known as RDP Proxy)

  C. PSM for SSH (previously known as PSM-SSH Proxy)

  D. All of the above

  Correct Answer: D

• Question 29:

  A new HTML5 Gateway has been deployed in your organization. Where do you configure the PSM to use the HTML5 Gateway?

  A. Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway > Administration > Options

  B. Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers

  C. Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway

  D. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details

  Correct Answer: A

• Question 30:

  For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

  A. Create an exception to the Master Policy to exclude the group from the workflow process.

  B. Edith the master policy rule and modify the advanced' Access safe without approval' rule to include the group.

  C. On the safe in which the account is stored grant the group the' Access safe without audit' authorization.

  D. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization.

  Correct Answer: D