CyberArk CyberArk Certifications PAM-DEF Questions & Answers

• Question 81:

  When should vault keys be rotated?

  A. when it is copied to file systems outside the vault

  B. annually

  C. whenever a CyberArk user leaves the organization

  D. when migrating to a new data center

  Correct Answer: A

• Question 82:

  What is required to manage loosely connected devices?

  A. PSM for SSH

  B. EPM

  C. PSM

  D. PTA

  Correct Answer: B

• Question 83:

  You want to give a newly-created group rights to review security events under the Security pane. You also want to be able to update the status of these events. Where must you update the group to allow this?

  A. in the PTAAuthorizationGroups parameter, found in Administration > Options > PTA

  B. in the PTAAuthorizationGroups parameter, found in Administration > Options > General

  C. in the SecurityEventsAuthorizationGroups parameter, found in Administration > Security > Options

  D. in the SecurityEventsFeedAuthorizationGroups parameter, found in Administration > Options > General

  Correct Answer: D

• Question 84:

  In addition to add accounts and update account contents, which additional permission on the safe is required to add a single account?

  A. Upload Accounts Properties

  B. Rename Accounts

  C. Update Account Properties

  D. Manage Safe

  Correct Answer: C

• Question 85:

  You created a new platform by duplicating the out-of-box Linux through the SSH platform. Without any change, which Text Recorder Type(s) will the new platform support? (Choose two.)

  A. SSH Text Recorder

  B. Universal Keystrokes Text Recorder

  C. Events Text Recorder

  D. SQL Text Recorder

  E. Telnet Commands Text Recorder

  Correct Answer: AB

• Question 86:

  Which change could CyberArk make to the REST API that could cause existing scripts to fail?

  A. adding optional parameters in the request

  B. adding additional REST methods

  C. removing parameters

  D. returning additional values in the response

  Correct Answer: C

• Question 87:

  If PTA is integrated with a supported SIEM solution, which detection becomes available?

  A. unmanaged privileged account

  B. privileged access to the Vault during irregular days

  C. riskySPN

  D. exposed credentials

  Correct Answer: A

• Question 88:

  You notice an authentication failure entry for the DR user in the ITALog.

  What is the correct process to fix this error? (Choose two.)

  A. PrivateArk Client > Tools > Administrative Tools > Users and Groups > DR User > Update > Authentication > Update Password.

  B. Create a new credential file, on the DR Vault, using the CreateCredFile utility and the newly set password. . Create a new credential file, on the Primary Vault, using the CreateCredFile utility and the newly set password.

  C. PVWA > User Provisioning > Users and Groups > DR User > Update Password.

  D. PrivateArk Client > Tools > Administrative Tools > Users and Groups > PAReplicate User > Update > Authentication > Update Password.

  Correct Answer: AC

• Question 89:

  What is required to enable access over SSH to a Unix account through both PSM and PSMP?

  A. The platform must contain connection components for PSM-SSH and PSMP-SSH.

  B. PSM and PSMP must already have stored the SSH Fingerprint for the Unix host.

  C. The 'Enable PSMP' setting in the Unix platform must be set to Yes.

  D. A duplicate platform (Called ) with the PSMP settings must be created.

  Correct Answer: A

• Question 90:

  What are the minimum permissions to add multiple accounts from a file when using PVWA bulk-upload? (Choose three.)

  A. add accounts

  B. rename accounts

  C. update account content

  D. update account properties

  E. view safe members

  F. add safes

  Correct Answer: ACD