CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 61:

  Users are unable to launch Web Type Connection components from the PSM server. Your manager asked you to open the case with CyberArk Support. Which logs will be most useful for the CyberArk Support Team to debug the issue? (Choose three.)

  A. PSMConsole.log

  B. PSMDebug.log

  C. PSMTrace.log

  D. .Component.log

  E. PMconsole.log

  F. ITALog.log

  Correct Answer: ACD

• Question 62:

  Where can a user with the appropriate permissions generate a report? (Choose two.)

  A. PVWA > Reports

  B. PrivateArk Client

  C. Cluster Vault Manager

  D. PrivateArk Server Monitor

  E. PARClient

  Correct Answer: AB

• Question 63:

  During a High Availability node switch you notice an error and the Cluster Vault Manager Utility fails back to the original node. Which log files should you check to investigate the cause of the issue? (Choose three.)

  A. CyberArk Webconsole.log

  B. VaultDB.log

  C. PM_Error.log

  D. ITALog.log

  E. ClusterVault.console.log

  F. logiccontainer.log

  Correct Answer: BDE

• Question 64:

  You created a new safe and need to ensure the user group cannot see the password, but can connect through the PSM. Which safe permissions must you grant to the group? (Choose two.)

  A. List Accounts

  B. Use Accounts

  C. Access Safe without Confirmation

  D. Retrieve Files

  E. Confirm Request

  Correct Answer: AB

• Question 65:

  According to CyberArk, which issues most commonly cause installed components to display as disconnected in the System Health Dashboard? (Choose two.)

  A. network instabilities/outages

  B. vault license expiry

  C. credential de-sync

  D. browser compatibility issues

  E. installed location file corruption

  Correct Answer: AC

• Question 66:

  When an account is unable to change its own password, how can you ensure that password reset with the reconcile account is performed each time instead of a change?

  A. Set the parameter RCAllowManualReconciliation to Yes.

  B. Set the parameter ChangePasswordinResetMade to Yes.

  C. Set the parameter IgnoreReconcileOnMissingAccount to No.

  D. Set the UnlockUserOnReconcile to Yes.

  Correct Answer: B

• Question 67:

  You want to build a connector that connects to a website through the Web applications for PSM framework. Which default connector do you duplicate and modify?

  A. PSM-ChromeSample

  B. PSM-WebForm

  C. PSM-WebApp

  D. PSM-WebAppSample

  Correct Answer: D

• Question 68:

  You are running a "Privileged Accounts Inventory" Report through the Reports page in PVWA on a specific safe. To show complete account inventory information, which permission/s are needed on that safe?

  A. List Accounts, View Safe Members

  B. Manage Safe Owners

  C. List Accounts, Access Safe without confirmation

  D. Manage Safe, View Audit

  Correct Answer: A

• Question 69:

  Where can reconcile and/or logon accounts be linked to an account? (Choose two.)

  A. account settings

  B. platform settings

  C. master policy

  D. safe settings

  E. service account settings

  Correct Answer: AB

• Question 70:

  A password compliance audit found:

  1) One-time password access of 20 domain accounts that are members of Domain Admins group in Active Directory are not being enforced.

  2) All the sessions of connecting to domain controllers are not being recorded by CyberArk PSM.

  What should you do to address these findings?

  A. Edit the Master Policy and add two policy exceptions: enable "Enforce one-time password access", enable "Record and save session activity".

  B. Edit safe properties and add two policy exceptions: enable "Enforce one-time password access", enable "Record and save session activity".

  C. Edit CPM Settings and add two policy exceptions: enable "Enforce one-time password access", enable "Record and save session activity".

  D. Contact the Windows Administrators and request them to add two policy exceptions at Active Directory Level: enable "Enforce one-time password access", enable "Record and save session activity".

  Correct Answer: A