CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 51:

  Which processes reduce the risk of credential theft? (Choose two.)

  A. require dual control password access approval

  B. require password change every X days

  C. enforce check-in/check-out exclusive access

  D. enforce one-time password access

  Correct Answer: BD

• Question 52:

  To change the safe where recordings are kept for a specific platform, which setting must you update in the platform configuration?

  A. SessionRecorderSafe

  B. SessionSafe

  C. RecordingsPath

  D. RecordingLocation

  Correct Answer: A

• Question 53:

  You want to create a new onboarding rule. Where do you accomplish this?

  A. In PVWA, click Reports > Unmanaged Accounts > Rules

  B. In PVWA, click Options > Platform Management > Onboarding Rules

  C. In PrivateArk, click Tools > Onboarding Rules

  D. In PVWA, click Accounts > Onboarding Rules

  Correct Answer: D

• Question 54:

  What must you specify when configuring a discovery scan for UNIX? (Choose two.)

  A. Vault Administrator

  B. CPM Scanner

  C. root password for each machine

  D. list of machines to scan

  E. safe for discovered accounts

  Correct Answer: BD

• Question 55:

  When are external vault users and groups synchronized by default?

  A. They are synchronized once every 24 hours between 1 AM and 5 AM.

  B. They are synchronized once every 24 hours between 7 PM and 12 AM.

  C. They are synchronized every 2 hours.

  D. They are not synchronized according to a specific schedule.

  Correct Answer: A

• Question 56:

  What does the Export Vault Data (EVD) utility do?

  A. exports data from the Vault to TXT or CSV files, or to MSSQL databases

  B. generates a backup file that can be used as a cold backup

  C. exports all passwords and imports them into another instance of CyberArk

  D. keeps two active vaults in sync

  Correct Answer: A

• Question 57:

  Which file must be edited on the Vault to configure it to send data to PTA?

  A. dbparm.ini

  B. PARAgent.ini

  C. my.ini

  D. padr.ini

  Correct Answer: A

• Question 58:

  A user needs to view recorded sessions through the PVWA.

  Without giving auditor access, which safes does a user need access to view PSM recordings? (Choose two.)

  A. Recordings safe

  B. Safe the account is in

  C. System safe

  D. PVWAConfiguration safe

  E. VaultInternal safe

  Correct Answer: AB

• Question 59:

  A new colleague created a directory mapping between the Active Directory groups and the Vault. Where can the newly Configured directory mapping be tested?

  A. Connect to the Active Directory and ensure the organizational unit exists.

  B. Connect to Sailpoint (or similar tool) to ensure the organizational unit is correctly named; log in to the PVWA with "Administrator" and confirm authentication succeeds.

  C. Search for members that exist only in the mapping group to grant them safe permissions through the PVWA.

  D. Connect to the PrivateArk Client with the Administrator Account to see if there is a user in the Vault Admin Group.

  Correct Answer: C

• Question 60:

  You have been asked to identify the up or down status of Vault Services. Which CyberArk utility can you use to accomplish this task?

  A. PrivateArk Central Administration Console

  B. PAS Reporter

  C. PrivateArk Remote Control Agent

  D. Syslog

  Correct Answer: C