PAM-DEF Revolutionary Guide To Exam CyberArk Dumps [Q10-Q31]

Rate this post

PAM-DEF Revolutionary Guide To Exam CyberArk Dumps

PAM-DEF Free Study Guide! with New Update 180 Exam Questions

Q10. DRAG DROP
Match the connection component to the corresponding OS/Function.

Q11. Which built-in report from the reports page in PVWA displays the number of days until a password is due to expire?

Privileged Accounts Inventory

Privileged Accounts Compliance Status

Activity Log

Privileged Accounts CPM Status

Q12. Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)

Store the CD in a physical safe and mount the CD every time Vault maintenance is performed

Copy the entire contents of the CD to the system Safe on the Vault

Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions

Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions

Q13. Which usage can be added as a service account platform?

Kerberos Tokens

IIS Application Pools

PowerShell Libraries

Loosely Connected Devices

Q14. Your customer, ACME Corp, wants to store the Safes Data in Drive D instead of Drive C.
Which file should you edit?

TSparm.ini

Vault.ini

DBparm.ini

user.ini

Q15. What is the purpose of the password change process?

To test that CyberArk is storing accurate credentials for accounts

To change the password of an account according to organizationally defined password rules

To allow CyberArk to manage unknown or lost credentials

To generate a new complex password

Q16. DRAG DROP
For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

Q17. Users who have the ‘Access Safe without confirmation’ safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

TRUE

FALSE

Q18. Which of the following statements are NOT true when enabling PSM recording for a target Windows server? (Choose all that apply)

The PSM software must be instated on the target server

PSM must be enabled in the Master Policy (either directly, or through exception)

PSMConnect must be added as a local user on the target server

RDP must be enabled on the target server

Q19. DRAG DROP
Match each key to its recommended storage location.

Q20. You are logging into CyberArk as the Master user to recover an orphaned safe.
Which items are required to log in as Master?

Master CD, Master Password, console access to the Vault server, Private Ark Client

Operator CD, Master Password, console access to the PVWA server, PVWA access

Operator CD, Master Password, console access to the Vault server, Recover.exe

Master CD, Master Password, console access to the PVWA server, Recover.exe

Q21. VAULT authorizations may be granted to_____.

Vault Users

Vault Groups

LDAP Users

LDAP Groups

Q22. To enable the Automatic response “Add to Pending” within PTA when unmanaged credentials are found, what are the minimum permissions required by PTAUser for the PasswordManager_pending safe?

List Accounts, View Safe members, Add accounts (includes update properties), Update Account content, Update Account properties

List Accounts, Add accounts (includes update properties), Delete Accounts, Manage Safe

Add accounts (includes update properties), Update Account content, Update Account properties, View Audit

View Accounts, Update Account content, Update Account properties, Access Safe without confirmation, Manage Safe, View Audit

Q23. You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account’s password the CPM will…..

None of these

Q24. You are onboarding an account that is not supported out of the box.
What should you do first to obtain a platform to import?

Create a service ticket in the customer portal explaining the requirements of the custom platform.

Search common community portals like stackoverflow, reddit, github for an existing platform.

From the platforms page, uncheck the “Hide non-supported platforms” checkbox and see if a platform meeting your needs appears.

Visit the CyberArk marketplace and search for a platform that meets your needs.

Q25. You receive this error: “Error in changepass to user domainuser on domain server(domain. (winRc=5) Access is denied.”
Which root cause should you investigate?

The account does not have sufficient permissions to change its own password.

The domain controller is unreachable.

The password has been changed recently and minimum password age is preventing the change.

The CPM service is disabled and will need to be restarted.

Q26. Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.

TRUE

FALSE

Q27. In PVWA, you are attempting to play a recording made of a session by user jsmith, but there is no option to “Fast Forward” within the video. It plays and only allows you to skip between commands instead. You are also unable to download the video.
What could be the cause?

Recording is of a PSM for SSH session.

The browser you are using is out of date and needs an update to be supported.

You do not have the “View Audit” permission on the safe where the account is stored.

You need to update the recorder settings in the platform to enable screen capture every 10000 ms or less.

Q28. Which permissions are needed for the Active Directory user required by the Windows Discovery process?

Domain Admin

LDAP Admin

Read/Write

Read

Q29. A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request.
What is the correct location to identify users or groups who can approve?

PVWA> Administration > Platform Configuration > Edit Platform > UI & Workflow > Dual Control> Approvers

PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests

PVWA> Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers

PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)

Q30. Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.

PACli.ini

Vault.ini

conf.ini

A comma delimited upload file

Q31. In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system .
What is the BEST way to allow CPM to manage root accounts?

Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server’s root account.

Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server’s root account.

Configure the Unix system to allow SSH logins.

Configure the CPM to allow SSH logins.