CyberArk PAM-DEF Online Practice Questions and Exam Preparation

CyberArk PAM-DEF Online Questions & Answers

• Question 81:

  PSM captures a record of each command that was executed in Unix.

  A. TRIE
  B. FALSE
  A. TRIE

• Question 82:

  A new HTML5 Gateway has been deployed in your organization. Where do you configure the PSM to use the HTML5 Gateway?

  A. Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway > Administration > Options
  B. Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers
  C. Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway
  D. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details
  A. Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway > Administration > Options

• Question 83:

  How does the Vault administrator apply a new license file?

  A. Upload the license.xml file to the system Safe and restart the PrivateArk Server service
  B. Upload the license.xml file to the system Safe
  C. Upload the license.xml file to the Vault Internal Safe and restart the PrivateArk Server service
  D. Upload the license.xml file to the Vault Internal Safe
  B. Upload the license.xml file to the system Safe

• Question 84:

  When running a "Privileged Accounts Inventory" Report through the Reports page in PVWA on a specific safe, which permission/s are required on that safe to show complete account inventory information?

  A. List Accounts, View Safe Members
  B. Manage Safe Owners
  C. List Accounts, Access Safe without confirmation
  D. Manage Safe, View Audit
  A. List Accounts, View Safe Members

• Question 85:

  DRAG DROP

  Match each key to its recommended storage location.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Server-Keys.htm

• Question 86:

  dbparm.ini is the main configuration file for the Vault.

  A. True
  B. False
  A. True

• Question 87:

  What are the minimum permissions to add multiple accounts from a file when using PVWA bulk-upload? (Choose three.)

  A. add accounts
  B. rename accounts
  C. update account content
  D. update account properties
  E. view safe members
  F. add safes
  A. add accounts
  C. update account content
  D. update account properties

• Question 88:

  In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.

  A. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server's root account.
  B. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.
  C. Configure the Unix system to allow SSH logins.
  D. Configure the CPM to allow SSH logins.
  B. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.

• Question 89:

  What is the maximum number of levels of authorization you can set up in Dual Control?

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

• Question 90:

  When onboarding multiple accounts from the Pending Accounts list, which associated setting must be the same across the selected accounts?

  A. Platform
  B. Connection Component
  C. CPM
  D. Vault
  A. Platform

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Onboarding-Accounts-and-SSH-Keys.htm?Highlight=safe%20does%20not%20support%20properties