CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 71:

  Which dependent accounts does the CPM support out-of-the-box? (Choose three.)

  A. Solaris Configuration file

  B. Windows Services

  C. Windows Scheduled Tasks

  D. Windows DCOM Applications

  E. Windows Registry

  F. Key Tab file

  Correct Answer: BCE

• Question 72:

  Where can you assign a Reconcile account? (Choose two.)

  A. in PVWA at the account level

  B. in PVWA in the platform configuration

  C. in the Master policy of the PVWA

  D. at the Safe level

  E. in the CPM settings

  Correct Answer: AB

• Question 73:

  How do you create a cold storage backup?

  A. On the DR Vault, install PAReplicate according to the Installation guide, configure the logon ini file, and define the Schedule tasks for full and incremental backups.

  B. Install the Vault Backup utility on a different machine from the Enterprise Password Vault server and trigger the full backup.

  C. Configure the backup options in the PVWA.

  D. On the DR Vault, configure the cold storage backup path in TSParm.ini file.

  Correct Answer: B

• Question 74:

  You have been asked to create an account group and assign three accounts which belong to a cluster. When you try to create a new group, you receive an unauthorized error; however, you are able to edit other aspects of the account

  properties.

  Which safe permission do you need to manage account groups?

  A. create folders

  B. specify next account content

  C. rename accounts

  D. manage safe

  Correct Answer: A

• Question 75:

  Which command generates a full backup of the Vault?

  A. PAReplicate.exe Vault.ini /LogonFromFile user.ini /FullBackup

  B. PAPreBackup.exe C:\PrivateArk\Server\Conf\Vault.ini Backup/Asdf1234 /full

  C. PARestore.exe PADR ini /LogonFromFile vault.ini /FullBackup

  D. CAVaultManager.exe RecoverBackupFiles /BackupPoolName BkpSvr1

  Correct Answer: A

• Question 76:

  The Active Directory User configured for Windows Discovery needs which permission(s) or membership?

  A. Member of Domain Admin Group

  B. Member of LDAP Admin Group

  C. Read and Write Permissions

  D. Read Only Permissions

  Correct Answer: D

• Question 77:

  You are concerned about the Windows Domain password changes occurring during business hours. Which settings must be updated to ensure passwords are only rotated outside of business hours?

  A. In the platform policy Automatic Password Management > Password Change > ToHour and FromHour

  B. in the Master Policy Account Change Window > ToHour and From Hour

  C. Administration Settings CPM Settings > ToHour and FromHour

  D. On each individual account Edit > Advanced > ToHour and FromHour

  Correct Answer: A

• Question 78:

  Which accounts can be selected for use in the Windows discovery process? (Choose two.)

  A. an account stored in the Vault

  B. an account specified by the user

  C. the Vault Administrator

  D. any user with Auditor membership

  E. the PasswordManager user

  Correct Answer: AB

• Question 79:

  What are the mandatory fields when onboarding from Pending Accounts? (Choose two.)

  A. Address

  B. Safe

  C. Account Description

  D. Platform

  E. CPM

  Correct Answer: BD

• Question 80:

  Where can PTA be configured to send alerts? (Choose two.)

  A. SIEM

  B. Email

  C. Google Analytics

  D. EVD

  E. PAReplicate

  Correct Answer: AB