CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 31:

  A user is receiving the error message "ITATS006E Station is suspended for User jsmith" when attempting to sign into the Password Vault Web Access (PVWA). Which utility would a Vault administrator use to correct this problem?

  A. createcredfile.exe
  B. cavaultmanager.exe
  C. PrivateArk
  D. PVWA
  C. PrivateArk

• Question 32:

  When are external vault users and groups synchronized by default?

  A. They are synchronized once every 24 hours between 1 AM and 5 AM.
  B. They are synchronized once every 24 hours between 7 PM and 12 AM.
  C. They are synchronized every 2 hours.
  D. They are not synchronized according to a specific schedule.
  A. They are synchronized once every 24 hours between 1 AM and 5 AM.

• Question 33:

  It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

  A. TRUE
  B. FALS
  A. TRUE

• Question 34:

  Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp. When the client's machine makes an RDP connection to the PSM server, which user will be utilized?

  A. Credentials stored in the Vault for the target machine
  B. Shadowuser
  C. PSMConnect
  D. PSMAdminConnect
  C. PSMConnect

• Question 35:

  Within the Vault each password is encrypted by:

  A. the server key
  B. the recovery public key
  C. the recovery private key
  D. its own unique key
  D. its own unique key

• Question 36:

  What is the easiest way to duplicate an existing platform?

  A. From PrivateArk, copy/paste the appropriate Policy.ini file; then rename it.
  B. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.
  C. From PrivateArk, copy/paste the appropriate settings in PVConfiguration.xml; then update the policyName variable.
  D. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click "Save as" INSTEAD of save to duplicate and rename the platform.
  D. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click "Save as" INSTEAD of save to duplicate and rename the platform.

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Adding-New-Platforms.htm#:~:text=Click%20ADMINISTRATION%20to%20display%20the,the%20Duplicate%20Platform%20window% 20appears

• Question 37:

  A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request. What is the correct location to identify users or groups who can approve?

  A. PVWA> Administration > Platform Configuration > Edit Platform > UI and Workflow > Dual Control> Approvers
  B. PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests
  C. PVWA> Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers
  D. PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)
  B. PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-setup-workflow.htm

• Question 38:

  Which CyberArk group does a user need to be part of to view recordings or live monitor sessions?

  A. Auditors
  B. Vault Admin
  C. DR Users
  D. Operators
  A. Auditors

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Monitoring-Privileged-Sessions.htm?TocPath=End%20User%7CMonitor%20Sessions%7CClassic%20Interface %7C_____1

• Question 39:

  DRAG DROP

  You have been asked to delegate the rights to unlock users to Tier 1 support. The Tier 1 support team already has an LDAP group for its members.

  Arrange the steps to do this in the correct sequence.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 40:

  When on-boarding account using Accounts Feed, Which of the following is true?

  A. You must specify an existing Safe where are account will be stored when it is on boarded to the Vault
  B. You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.
  C. You can specify the name of a new Platform that will be created and associated with the account
  D. Any account that is on boarded can be automatically reconciled regardless of the platform it is associated with.
  B. You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.