CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 31:

  Which command configures email alerts within PTA if settings need to be changed post install?

  A. /opt/tomcat/utility/emailConfiguration.sh

  B. /opt/PTA/emailConfiguration.sh

  C. /opt/PTA/utility/emailConfig.sh

  D. /opt/tomcat/utility/emailSetup.sh

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PTA/Outbound-Sending-PTA-Alerts-to-Email.htm

• Question 32:

  You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.

  How should this be configured to allow for password management using least privilege?

  A. Configure each CPM to use the correct logon account.

  B. Configure each CPM to use the correct reconcile account.

  C. Configure the UNIX platform to use the correct logon account.

  D. Configure the UNIX platform to use the correct reconcile account.

  Correct Answer: C

  Reference:https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/PASIMP/Linked-PAS-Accounts.htm#Overview

• Question 33:

  It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

  A. TRUE

  B. FALS

  Correct Answer: A

• Question 34:

  Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?

  A. Yes, when using the connect button, CyberArk uses the PMTerminal.exe process which bypasses the root SSH restriction.

  B. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.

  C. Yes, if a logon account is associated with the root account.

  D. No, it is not possible.

  Correct Answer: B

• Question 35:

  Which of the Following can be configured in the Master Poky? Choose all that apply.

  A. Dual Control

  B. One Time Passwords

  C. Exclusive Passwords

  D. Password Reconciliation

  E. Ticketing Integration

  F. Required Properties

  G. Custom Connection Components

  H. Password Aging Rules

  Correct Answer: ABCH

• Question 36:

  The Accounts Feed contains:

  A. Accounts that were discovered by CyberArk in the last 30 days

  B. Accounts that were discovered by CyberArk that have not yet been onboarded

  C. All accounts added to the vault in the last 30 days

  D. All users added to CyberArk in the last 30 days

  Correct Answer: A

• Question 37:

  In a rule using "Privileged Session Analysis and Response" in PTA, which session options are available to configure as responses to activities?

  A. Suspend, Terminate, None

  B. Suspend, Terminate, Lock Account

  C. Pause, Terminate, None

  D. Suspend, Terminate

  Correct Answer: A

• Question 38:

  According to the DEFAULT Web Options settings, which group grants access to the REPORTS page?

  A. PVWAUsers

  B. Vault Admins

  C. Auditors

  D. PVWAMonitor

  Correct Answer: D

• Question 39:

  You want to generate a license capacity report.

  Which tool accomplishes this?

  A. Password Vault Web Access

  B. PrivateArk Client

  C. DiagnoseDB Report

  D. RestAPI

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.1/en/Content/PASIMP/Reporting-License-Usage.htm

• Question 40:

  PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

  A. True

  B. False, the PTA can suspend sessions whether the session is made via the PSM or not

  Correct Answer: B