2023 PAM-DEF dumps review – Professional Quiz Study Materials [Q92-Q116]

Rate this post

2023 PAM-DEF dumps review – Professional Quiz Study Materials

PAM-DEF Test Prep Training Practice Exam Questions Practice Tests

NO.92 CyberArk recommends implementing object level access control on all Safes.

True

False

NO.93 As long as you are a member of the Vault Admins group you can grant any permission on any safe.

TRUE

FALSE

NO.94 Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

PSM (i.e., launching connections by clicking on the “Connect” button in the PVWA)

PSM for Windows (previously known as RDP Proxy)

PSM for SSH (previously known as PSM SSH Proxy)

All of the above

NO.95 An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?

PSMConnect

PSMMaster

PSMGwUser

PSMAdminConnect

NO.96 If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attached to the account?

KeyPath

KeyFile

ObjectName

Address

NO.97 DRAG DROP
Arrange the steps to restore a Vault using PARestore for a Backup in the correct sequence.

NO.98 Which report provides a list of account stored in the vault.

Privileged Accounts Inventory

Privileged Accounts Compliance Status

Entitlement Report

Active Log

NO.99 You have been asked to identify the up or down status of Vault services.
Which CyberArk utility can you use to accomplish this task?

Vault Replicator

PAS Reporter

Remote Control Agent

Syslog

NO.100 Which values are acceptable in the address field of an Account?

It must be a Fully Qualified Domain Name (FQDN)

It must be an IP address

It must be NetBIOS name

Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable

NO.101 Users are unable to launch Web Type Connection components from the PSM server. Your manager asked you to open the case with CyberArk Support.
Which logs will help the CyberArk Support Team debug the issue? (Choose three.)

PSMConsole.log

PSMDebug.log

PSMTrace.log

<Session_ID>.Component.log

PMconsole.log

ITAlog.log

NO.102 A Logon Account can be specified in the Master Policy.

TRUE

FALSE

NO.103 Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)

Store the CD in a physical safe and mount the CD every time Vault maintenance is performed

Copy the entire contents of the CD to the system Safe on the Vault

Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions

Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions

NO.104 A Vault Administrator team member can log in to CyberArk, but for some reason, is not given Vault Admin rights.
Where can you check to verify that the Vault Admins directory mapping points to the correct AD group?

PVWA > User Provisioning > LDAP Integration > Mapping Criteria

PVWA > User Provisioning > LDAP Integration > Map Name

PVWA > Administration > LDAP Integration > Mappings

PVWA > Administration > LDAP Integration > AD Groups

NO.105 Which PTA sensors are required to detect suspected credential theft?

Logs, Vault Logs

Logs, Network Sensor, Vault Logs

Logs, PSM Logs, CPM Logs

Logs, Network Sensor, EPM

NO.106 Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?

They are added to the Pending Accounts list and can be reviewed and manually uploaded.

They cannot be onboarded to the Password Vault.

They must be uploaded using third party tools.

They are not part of the Discovery Process.

NO.107 What is the purpose of the Immediate Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how often the CPM rests between password changes.

To Control the maximum amount of time the CPM will wait for a password change to complete.

Explanation
When the Master Policy enforces check-in/check-out exclusive access, passwords are changed when the user clicks the Release button and releases the account. This is based on the ImmediateInterval parameter in the applied platform. If the user forgets to release the account, it is automatically released and changed by the CPM after a predetermined number of minutes, defined in the MinValidityPeriod parameter specified in the platform

NO.108 Platform settings are applied to _________.

The entire vault.

Network Areas

Safes

Individual Accounts

NO.109 Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

TRUE

FALSE

NO.110 You need to enable the PSM for all platforms.
Where do you perform this task?

Platform Management > (Platform) > UI & Workflows

Master Policy > Session Management

Master Policy > Privileged Access Workflows

Administration > Options > Connection Components

NO.111 When managing SSH keys, the CPM stored the Private Key

In the Vault

On the target server

A & B

Nowhere because the private key can always be generated from the public key.

NO.112 What is the chief benefit of PSM?

Privileged session isolation

Automatic password management

Privileged session recording

‘Privileged session isolation’ and ‘Privileged session recording’

NO.113 DRAG DROP
Match each key to its recommended storage location.

NO.114 To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?

List Accounts, Use Accounts

List Accounts, Use Accounts, Retrieve Accounts

Use Accounts

List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation

NO.115 In the screenshot displayed, you just configured the usage in CyberArk and want to update its password.

What is the least intrusive way to accomplish this?