CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 41:

  You are troubleshooting a PVWA slow response. Which log files should you analyze first? (Choose two.)

  A. ITALog.log

  B. web.config

  C. CyberArk.WebApplication.log

  D. CyberArk.WebConsole.log

  Correct Answer: CD

• Question 42:

  What do you need on the Vault to support LDAP over SSL?

  A. CA Certificate(s) used to sign the External Directory certificate

  B. RECPRV.key

  C. a private key for the external directory

  D. self-signed Certificate(s) for the Vault

  Correct Answer: A

• Question 43:

  Refer to the exhibit.

  

  Why is user "EMEALevel2Support" unable to change the password for user "Operator"?

  A. EMEALevel2Support's hierarchy level is not the same or higher than Operator.

  B. EMEALevel2Support does not have the "Manage Directory Mapping" role.

  C. Operator can only be reset by the Master user.

  D. EMEALevel2Support does not have rights to reset passwords for other users.

  Correct Answer: C

• Question 44:

  Customers who have the `Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 45:

  What is the easiest way to duplicate an existing platform?

  A. From PrivateArk, copy/paste the appropriate Policy.ini file; then rename it.

  B. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.

  C. From PrivateArk, copy/paste the appropriate settings in PVConfiguration.xml; then update the policyName variable.

  D. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click "Save as" INSTEAD of save to duplicate and rename the platform.

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Adding-New-Platforms.htm#:~:text=Click%20ADMINISTRATION%20to%20display%20the,the%20Duplicate%20Platform%20window% 20appears

• Question 46:

  You are onboarding an account that is not supported out of the box. What should you do first to obtain a platform to import?

  A. Create a service ticket in the customer portal explaining the requirements of the custom platform.

  B. Search common community portals like stackoverflow, reddit, github for an existing platform.

  C. From the platforms page, uncheck the "Hide non-supported platforms" checkbox and see if a platform meeting your needs appears.

  D. Visit the CyberArk marketplace and search for a platform that meets your needs.

  Correct Answer: D

• Question 47:

  Due to corporate storage constraints, you have been asked to disable session monitoring and recording for 500 testing accounts used for your lab environment. How do you accomplish this?

  A. Master Policy>select Session Management>add Exceptions to the platform(s)>disable Session Monitoring and Recording policies

  B. Administration>Platform Management>select the platform(s)>disable Session Monitoring and Recording

  C. Polices>Access Control (Safes)>select the safe(s)>disable Session Monitoring and Recording policies

  D. Administration>Configuration Options>Options>select Privilege Session Management>disable Session Monitoring and Recording policies

  Correct Answer: A

• Question 48:

  What is the easiest way to duplicate an existing platform?

  A. From PrivateArk, copy/paste the appropriate Policy.ini file; then rename it.

  B. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.

  C. From PrivateArk, copy/paste the appropriate settings in PVConfiguration.xml; then update the policyName variable.

  D. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click "Save as" INSTEAD of save to duplicate and rename the platform.

  Correct Answer: B

• Question 49:

  You are creating a new Rest API user that utilizes CyberArk Authentication. What is a correct process to provision this user?

  A. Private Ark Client > Tools > Administrative Tools > Users and Groups > New > User

  B. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Add

  C. PVWA > User Provisioning > LDAP Integration > Add Mapping

  D. PVWA > User Provisioning > Users and Groups > New > User

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/WebServices/Implementing%20Privileged%20Account%20Security%20Web%20Services%20.htm

• Question 50:

  Which methods can you use to add a user directly to the Vault Admin Group? (Choose three.)

  A. REST API

  B. PrivateArk Client

  C. PACLI

  D. PVWA

  E. Active Directory

  F. Sailpoint

  Correct Answer: ABC