CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 61:

  Which PTA sensors are required to detect suspected credential theft?

  A. Logs, Vault Logs
  B. Logs, Network Sensor, Vault Logs
  C. Logs, PSM Logs, CPM Logs
  D. Logs, Network Sensor, EPM
  A. Logs, Vault Logs

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/10.10/en/Content/PTA/What-Does-PTA-Detect.htm

• Question 62:

  PSM for Windows (previously known as "RDP Proxy") supports connections to the following target systems

  A. Windows
  B. UNIX
  C. Oracle
  D. All of the above
  A. Windows

• Question 63:

  What do you need on the Vault to support LDAP over SSL?

  A. CA Certificate(s) used to sign the External Directory certificate
  B. RECPRV.key
  C. a private key for the external directory
  D. self-signed Certificate(s) for the Vault
  A. CA Certificate(s) used to sign the External Directory certificate

• Question 64:

  Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.

  A. PACli.ini
  B. Vault.ini
  C. conf.ini
  D. A comma delimited upload file
  B. Vault.ini
  C. conf.ini
  D. A comma delimited upload file

• Question 65:

  One can create exceptions to the Master Policy based on ____________________.

  A. Safes
  B. Platforms
  C. Policies
  D. Accounts
  D. Accounts

• Question 66:

  A user needs to view recorded sessions through the PVWA.

  Without giving auditor access, which safes does a user need access to view PSM recordings? (Choose two.)

  A. Recordings safe
  B. Safe the account is in
  C. System safe
  D. PVWAConfiguration safe
  E. VaultInternal safe
  A. Recordings safe
  B. Safe the account is in

• Question 67:

  A user with administrative privileges to the vault can only grant other users privileges that he himself has.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 68:

  VAULT authorizations may be granted to_____.

  A. Vault Users
  B. Vault Groups
  C. LDAP Users
  D. LDAP Groups
  C. LDAP Users

• Question 69:

  What is the purpose of the password change process?

  A. To test that CyberArk is storing accurate credentials for accounts
  B. To change the password of an account according to organizationally defined password rules
  C. To allow CyberArk to manage unknown or lost credentials
  D. To generate a new complex password
  B. To change the password of an account according to organizationally defined password rules

• Question 70:

  Which values are acceptable in the address field of an Account?

  A. It must be a Fully Qualified Domain Name (FQDN)
  B. It must be an IP address
  C. It must be NetBIOS name
  D. Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable
  D. Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable