CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 71:

  What is the name of the Platform parameters that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

  A. Min Validity Period
  B. Interval
  C. Immediate Interval
  D. Timeout
  A. Min Validity Period

  ---

  Explanation/Reference:

  Min Validity Period -The number of minutes to wait from the last retrieval of the password until it is replaced. This gives the user a minimum period to be able to use the password before it is replaced. Use -1 to ignore this property. This parameter is also used to release exclusive accounts automatically Interval ? The number of minutes that the Central Policy Manager waits between running periodic searches for the platform. Note: It is recommended to leave the default value of 1440. If a change/verify policy has been configured, the Central Policy Manager will automatically align the periodic searches with the start of the defined timeframes."

• Question 72:

  DRAG DROP

  Match each permission to where it can be found.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Safes-add-a-safe-member.htm?TocPath=Administration%7CPrivileged%20Accounts%7CAccess%20Control%7CSafes%20and%20Safe%20members%7C_____3

• Question 73:

  You want to generate a license capacity report. Which tool accomplishes this?

  A. Password Vault Web Access
  B. PrivateArk Client
  C. DiagnoseDB Report
  D. RestAPI
  B. PrivateArk Client

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.1/en/Content/PASIMP/Reporting-License-Usage.htm

• Question 74:

  What are the mandatory fields when onboarding from Pending Accounts? (Choose two.)

  A. Address
  B. Safe
  C. Account Description
  D. Platform
  E. CPM
  B. Safe
  D. Platform

• Question 75:

  The vault supports Subnet Based Access Control.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 76:

  In a default CyberArk installation, which group must a user be a member of to view the "reports" page in PVWA?

  A. PVWAMonitor
  B. ReportUsers
  C. PVWAReports
  D. Operators
  A. PVWAMonitor

• Question 77:

  The vault supports Role Based Access Control.

  A. TRUE
  B. FALSE
  B. FALSE

  ---

  Explanation/Reference:

  Reference https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Object-Level-Access-Control.htm

• Question 78:

  Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

  A. Accounts Discovery
  B. Auto Detection
  C. Onboarding RestAPI functions
  D. PTA Rules
  B. Auto Detection

• Question 79:

  What are valid ways to invite vendors using the Remote Access portal? (Choose two.)

  A. Use the vendor invitation form.
  B. Call the vendor users and have them scan a QR code.
  C. Use the self-service invitation URL.
  D. Add the vendors in PVWA and send them their password.
  E. Contact CyberArk support to help invite the vendors.
  A. Use the vendor invitation form.
  C. Use the self-service invitation URL.

• Question 80:

  The Vault administrator can change the Vault license by uploading the new license to the system Safe.

  A. True
  B. False
  A. True