CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 51:

  In your organization the "click to connect" button is not active by default. How can this feature be activated?

  A. Policies > Master Policy > Allow EPV transparent connections > Inactive
  B. Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception
  C. Policies > Master Policy > Allow EPV transparent connections > Active
  D. Policies > Master Policy > Password Management
  C. Policies > Master Policy > Allow EPV transparent connections > Active

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.1/en/Content/TranparentConnections_Web.htm

• Question 52:

  A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings. What is the issue?

  A. The user must login as PSMAdminConnect
  B. The PSM service is not running
  C. The user is not a member of the PVWAMonitor group
  D. The user is not a member of the Auditors group
  D. The user is not a member of the Auditors group

• Question 53:

  Accounts Discovery allows secure connections to domain controllers.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 54:

  A Vault administrator have associated a logon account to one of their Unix root accounts in the vault. When attempting to verify the root account's password the Central Policy Manager (CPM) will:

  A. ignore the logon account and attempt to log in as root
  B. prompt the end user with a dialog box asking for the login account to use
  C. log in first with the logon account, then run the SU command to log in as root using the password in the Vault D. none of these
  B. prompt the end user with a dialog box asking for the login account to use

• Question 55:

  What is the primary purpose of Dual Control?

  A. Reduced risk of credential theft
  B. More frequent password changes
  C. Non-repudiation (individual accountability)
  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.
  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

• Question 56:

  A company has multiple business units that have their own set of vendors. Each business unit has a distinct role to manage vendor access. The business units want to have full control over the invitation process for their set of vendors.

  After inviting the user to the Remote Access portal, which permissions should be delegated?

  A. Administrator
  B. User
  C. Vendor Manager
  D. Viewer
  C. Vendor Manager

• Question 57:

  Select the best practice for storing the Master CD.

  A. Copy the files to the Vault server and discard the CD
  B. Copy the contents of the CD to a Hardware Security Module (HSM) and discard the CD
  C. Store the CD in a secure location, such as a physical safe
  D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder secured with NTFS permissions on the Vault
  D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder secured with NTFS permissions on the Vault

• Question 58:

  You have been given the requirement that certain accounts cannot have their passwords updated during business hours.

  How can you set up a configuration to meet this requirement?

  A. Change settings on the CPM configuration safe so that access is permitted after business hours only.
  B. Update the password change parameters of the platform to match the permitted time frame.
  C. Disable automatic CPM management for all accounts that are assigned to this platform.
  D. Add an exception to the Master Policy to allow the action for this platform during the permitted time.
  B. Update the password change parameters of the platform to match the permitted time frame.

• Question 59:

  What is the purpose of a linked account?

  A. To ensure that a particular collection of accounts all have the same password.
  B. To ensure a particular set of accounts all change at the same time.
  C. To connect the CPNI to a target system.
  D. To allow more than one account to work together as part of a password management process.
  D. To allow more than one account to work together as part of a password management process.

• Question 60:

  The primary purpose of exclusive accounts is to ensure non-repudiation (Individual accountability).

  A. TRUE
  B. FALS
  A. TRUE