CyberArk PAM-DEF Exam Dumps

CyberArk PAM-DEF Sample Question Answers

Question # 1

Which CyberArk utility allows you to create lists of Master Policy Settings, owners and safes for output to text files or MSSQL databases?

A. Export Vault Data
B. Export Vault Information
C. PrivateArk Client
D. Privileged Threat Analytics

Show Answer

Question # 2

You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to[b]change [/b] the root account’s password the CPM will…..

A. Log in to the system as root, then change root's password
B. Log in to the system as the logon account, then change roofs password
C. Log in to the system as the logon account, run the su command to log in as root, and then change root’spassword.
D. None of these

Show Answer

Question # 3

To enable the Automatic response “Add to Pending” within PTA when unmanaged credentials are found, whatare the minimum permissions required by PTAUser for the PasswordManager_pending safe?

A. List Accounts, View Safe members, Add accounts (includes update properties), Update Accountcontent, Update Account properties
B. List Accounts, Add accounts (includes update properties), Delete Accounts, Manage Safe
C. Add accounts (includes update properties), Update Account content, Update Account properties, ViewAudit
D. View Accounts, Update Account content, Update Account properties, Access Safe withoutconfirmation, Manage Safe, View Audit

Show Answer

Question # 4

The Password upload utility can be used to create safes.

A. TRUE
B. FALSE

Show Answer

Question # 5

Which user(s) can access all passwords in the Vault?

A. Administrator.
B. Any member of Vault administrators
C. Any member of auditors
D. Master

Show Answer

Question # 6

What is the purpose of the Immediate Interval setting in a CPM policy?

A. To control how often the CPM looks for System Initiated CPM work.
B. To control how often the CPM looks for User Initiated CPM work.
C. To control how often the CPM rests between password changes.
D. To Control the maximum amount of time the CPM will wait for a password change to complete.

Show Answer

Question # 7

Which is the primary purpose of exclusive accounts?

A. Reduced risk of credential theft
B. More frequent password changes
C. Non-repudiation (individual accountability)
D. To force a ‘collusion to commit’ fraud ensuring no single actor may use a password withoutauthorization

Show Answer

Question # 8

What is the maximum number of levels of authorization you can set up in Dual Control?

A. 1
B. 2
C. 3
D. 4

Show Answer

Question # 9

A new HTML5 Gateway has been deployed in your organization.Where do you configure the PSM to use the HTML5 Gateway?

A. Administration > Options > Privileged Session Management > Configured PSM Servers > ConnectionDetails > Add PSM Gateway
B. Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers
C. Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSMGateway
D. Administration > Options > Privileged Session Management > Configured PSM Servers > ConnectionDetails

Show Answer

Question # 10

You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unableto log in directly with the root account and will need to use a secondary account.How should this be configured to allow for password management using least privilege?

A. Configure each CPM to use the correct logon account.
B. Configure each CPM to use the correct reconcile account.
C. Configure the UNIX platform to use the correct logon account.
D. Configure the UNIX platform to use the correct reconcile account.

Show Answer

Question # 11

It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

A. TRUE
B. FALSE

Show Answer

Question # 12

Which of the following files must be created or configured m order to run Password Upload Utility? Select allthat apply

A. PACli.ini
B. Vault.ini
C. conf.ini
D. A comma delimited upload file

Show Answer

Question # 13

When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA)and receive approval before being able to launch a secure connection via PSM for Windows (previouslyknown as RDP Proxy).

A. True
B. False, a user can submit the request after the connection has already been initiated via the PSM forWindows

Show Answer

Question # 14

When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA)and receive approval before being able to launch a secure connection via PSM for Windows (previouslyknown as RDP Proxy).

A. True
B. False, a user can submit the request after the connection has already been initiated via the PSM forWindows

Show Answer

Question # 15

In the Private Ark client, how do you add an LDAP group to a CyberArk group?

A. Select Update on the CyberArk group, and then click Add > LDAP Group
B. Select Update on the LDAP Group, and then click Add > LDAP Group
C. Select Member Of on the CyberArk group, and then click Add > LDAP Group
D. Select Member Of on the LDAP group, and then click Add > LDAP Group

Show Answer

Question # 16

According to the DEFAULT Web Options settings, which group grants access to the REPORTS page?

A. PVWAUsers
B. Vault Admins
C. Auditors
D. PVWAMonitor

Show Answer

Question # 17

You are logging into CyberArk as the Master user to recover an orphaned safe.Which items are required to log in as Master?

A. Master CD, Master Password, console access to the Vault server, Private Ark Client
B. Operator CD, Master Password, console access to the PVWA server, PVWA access
C. Operator CD, Master Password, console access to the Vault server, Recover.exe
D. Master CD, Master Password, console access to the PVWA server, Recover.exe

Show Answer

Question # 18

A user with administrative privileges to the vault can only grant other users privileges that he himself has.

A. TRUE
B. FALSE

Show Answer

Question # 19

CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

A. TRUE
B. FALSE

Show Answer

Question # 20

Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply. 

A. PSM connections to target devices that are not managed by CyberArk.
B. Session Recording.
C. Real-time live session monitoring.
D. PSM connections from a terminal without the need to login to the PVWA.

Show Answer

Question # 21

Select the best practice for storing the Master CD.

A. Copy the files to the Vault server and discard the CD
B. Copy the contents of the CD to a Hardware Security Module (HSM) and discard the CD
C. Store the CD in a secure location, such as a physical safe
D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder secured with NTFS permissions on the Vault

Show Answer

Question # 22

Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

A. TRUE
B. FALS

Show Answer

Question # 23

It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

A. TRUE
B. FALS

Show Answer

Question # 24

Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

A. Suspected credential theft
B. Over-Pass-The-Hash
C. Golden Ticket
D. Unmanaged privileged access

Show Answer