PAM-DEF by CyberArk Actual Free Exam Q&As

Question 1

To ensure all sessions are being recorded, a CyberArk administrator goes to the master policy and makes configuration changes.
Which configuration is correct?

A. Require privileged session monitoring and isolation = inactive; Record and save session activity = active. B. Require privileged session monitoring and isolation = active; Record and save session activity = active. C. Require privileged session monitoring and isolation = active; Record and save session activity = inactive. D. Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

How do you create a cold storage backup?

A. On the DR Vault, install PAReplicate according to the Installation guide, configure the logon ini file, and define the Schedule tasks for full and incremental backups. B. Configure the backup options in the PVWA. C. Install the Vault Backup utility on a different machine from the Enterprise Password Vault server and trigger the full backup. D. On the DR Vault, configure the cold storage backup path in TSParm.ini file.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

What does the minvalidity parameter on a platform policy determine?

A. minimum amount of time that Just in Time access is valid B. time in minutes before an empty safe will be automatically deleted C. time between a password retrieval and the account becoming eligible for a password change D. timeout for users signed into the PVWA as configured in the global settings

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

You received a notification from one of your CyberArk auditors that they are missing Vault level audit permissions. You confirmed that all auditors are missing the Audit Users Vault permission.
Where do you update this permission for all auditors?

A. Private Ark Client > Tools > Administrative Tools > Users and Groups > Auditors > Authorizations tab B. PVWA> Administration > Configuration Options > LDAP integration > Vault Auditors Mapping > Vault Authorizations C. PVWA User Provisioning > LDAP integration > Vault Auditors Mapping > Vault Authorizations D. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Vault Authorizations

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

Which option in the Private Ark client is used to update users' Vault group memberships?

A. Update > Authorizations tab B. Update > General tab C. Update > Group tab D. Update > Member Of tab

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

Which dependent accounts does the CPM support out-of-the-box? (Choose three.)

A. Solaris Configuration file B. Windows Registry C. Windows DCOM Applications D. Windows Scheduled E. Key Tab file F. Windows Services

Discussion 0

Correct Answer: B,D,F Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

You are creating a shared safe for the help desk.
What must be considered regarding the naming convention?

A. Ensure your naming convention is no longer than 20 characters. B. Combine environments, owners and platforms to minimize the total number of safes created. C. The use of these characters V:*<>".| is not allowed. D. Safe owners should determine the safe name to enable them to easily remember it.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

When the CPM connects to a database, which interface is most commonly used?

A. VBScript B. ODBC C. Kerberos D. Sybase

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 9

Match each key to its recommended storage location.

Discussion 0

Correct Answer:

Explanation

* The recommended storage locations for each key are as follows:
* Recovery Private Key: It is recommended to store the Recovery Private Key on the Vault Server Disk Drive. This is because the Recovery Private Key is used to decrypt the data stored in the Vault.
* Recovery Public Key: It is recommended to store the Recovery Public Key in a Hardware Security Module. This is because the Recovery Public Key is used to encrypt the data stored in the Vault.
* Server Key: It is recommended to store the Server Key in a Physical Safe. This is because the Server Key is used to open the Vault, much like the key of a physical Vault. The key is required to start the Vault, after which the Server Key can be removed until the Server is restarted. When the Vault is stopped, the information stored in the Vault is completely inaccessible without that key.
* SSH Keys: It is recommended to store the SSH Keys in the Vault. This is because the SSH Keys are used to connect to remote machines using the SSH protocol. The Vault can manage the passwords and sessions for the SSH Keys and provide secure access to the target systems.
References: Server keys - CyberArk, Cyberark Key Storage Plugin (Enterprise) - Rundeck

Question 10

As long as you are a member of the Vault Admins group you can grant any permission on any safe.

A. TRUE B. FALSE

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 11

A recently-hired colleague onboarded five new Local Accounts that are used for five standalone Windows Servers. After attempting to connect to the servers from PVWA, the colleague noticed that the "Connect" button was greyed out for all five new accounts.
What can you do to help your colleague resolve this issue? (Choose two.)

A. Verify that the correct PSM connection component appears within account platform settings. B. Verify that the address field is populated with an IP or FQDN of each server. C. Verify that the "Disable automatic management for this account" setting for each account is not enabled. D. Notify the Windows Team that created the new accounts that the CyberArk PAM solution is not designed to manage local accounts on Windows Servers. E. Verify that the address field is blank and that the correct PSM connection component appears within account platform settings.

Discussion 0

Correct Answer: A,B,C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 12

Your customer, ACME Corp, wants to store the Safes Data in Drive D instead of Drive C.
Which file should you edit?

A. user.ini B. DBparm.ini C. TSparm.ini D. Vault.ini

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

CyberArk Defender - PAM - PAM-DEF Exam Practice Test