Free CyberArk (PAM-DEF) Certification Sample Questions with Online Practice Test
PAM-DEF Certification Study Guide Pass PAM-DEF Fast
NEW QUESTION 89
Platform settings are applied to _________.
- A. Safes
- B. Network Areas
- C. Individual Accounts
- D. The entire vault.
Answer: C
NEW QUESTION 90
A new HTML5 Gateway has been deployed in your organization.
Where do you configure the PSM to use the HTML5 Gateway?
- A. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details
- B. Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers
- C. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway
- D. Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway
Answer: C
NEW QUESTION 91
Time of day or day of week restrictions on when password verifications can occur configured in
____________________.
- A. The Account Details
- B. The Platform settings
- C. The Safe settings
- D. The Master Policy
Answer: B
NEW QUESTION 92
In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system .
What is the BEST way to allow CPM to manage root accounts?
- A. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.
- B. Configure the Unix system to allow SSH logins.
- C. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server's root account.
- D. Configure the CPM to allow SSH logins.
Answer: A
NEW QUESTION 93
A Logon Account can be specified in the Master Policy.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION 94
What is the purpose of the HeadStartlnterval setting m a platform?
- A. It instructs the CPM to initiate the password change process X number of days before expiration.
- B. It instructs the AIM Provider to 'skip the cache' during the defined time period
- C. It alerts users of upcoming password changes x number of days before expiration.
- D. It determines how far in advance audit data is collected tor reports
Answer: A
NEW QUESTION 95
To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?
- A. List Accounts, Use Accounts
- B. Use Accounts
- C. List Accounts, Use Accounts, Retrieve Accounts
- D. List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation
Answer: A
NEW QUESTION 96
It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur
- A. TRUE
- B. FALS
Answer: A
Explanation:
Explanation
Password reconciliation can be restricted to specific days. This means that the CPM will only reconcile passwords on the days of the week specified in the RCExecutionDays parameter. The days of the week are represented by the first 3 letters of the name of the day. Sunday is represented by Sun, Mondayby Mon, etc.
NEW QUESTION 97
Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply.
- A. PSM connections to target devices that are not managed by CyberArk.
- B. PSM connections from a terminal without the need to login to the PVWA.
- C. Real-time live session monitoring.
- D. Session Recording.
Answer: A,C,D
NEW QUESTION 98
Which built-in report from the reports page in PVWA displays the number of days until a password is due to expire?
- A. Privileged Accounts Inventory
- B. Privileged Accounts CPM Status
- C. Activity Log
- D. Privileged Accounts Compliance Status
Answer: D
NEW QUESTION 99
Which of the following logs contains information about errors related to PTA?
- A. diamond.log
- B. WebApplication.log
- C. ITAlog.log
- D. pm_error.log
Answer: A
NEW QUESTION 100
DRAG DROP
Match the connection component to the corresponding OS/Function.
Answer:
Explanation:
NEW QUESTION 101
DRAG DROP
Arrange the steps to restore a Vault using PARestore for a Backup in the correct sequence.
Answer:
Explanation:
NEW QUESTION 102
Which combination of Safe member permissions will allow end users to log in to a remote machine transparently but NOT show or copy the password?
- A. Use Accounts
- B. List Accounts, Retrieve Accounts
- C. Use Accounts, Retrieve Accounts, List Accounts
- D. Use Accounts, List Accounts
Answer: B
NEW QUESTION 103
Your customer, ACME Corp, wants to store the Safes Data in Drive D instead of Drive C.
Which file should you edit?
- A. TSparm.ini
- B. Vault.ini
- C. user.ini
- D. DBparm.ini
Answer: A
NEW QUESTION 104
PSM captures a record of each command that was executed in Unix.
- A. TRIE
- B. FALSE
Answer: A
NEW QUESTION 105
An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?
- A. PSMConnect
- B. PSMGwUser
- C. PSMAdminConnect
- D. PSMMaster
Answer: C
NEW QUESTION 106
As long as you are a member of the Vault Admins group you can grant any permission on any safe.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION 107
What is the primary purpose of Dual Control?
- A. More frequent password changes
- B. Reduced risk of credential theft
- C. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.
- D. Non-repudiation (individual accountability)
Answer: C
NEW QUESTION 108
DRAG DROP
Match each permission to where it can be found.
Answer:
Explanation:
NEW QUESTION 109
When on-boarding account using Accounts Feed, Which of the following is true?
- A. You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.
- B. You can specify the name of a new Platform that will be created and associated with the account
- C. You must specify an existing Safe where are account will be stored when it is on boarded to the Vault
- D. Any account that is on boarded can be automatically reconciled regardless of the platform it is associated with.
Answer: A
NEW QUESTION 110
Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.
- A. PACli.ini
- B. Vault.ini
- C. conf.ini
- D. A comma delimited upload file
Answer: B,C,D
NEW QUESTION 111
......
Get Perfect Results with Premium PAM-DEF Dumps Updated 180 Questions: https://www.actual4exams.com/PAM-DEF-valid-dump.html
PAM-DEF Dumps PDF 2023 Program Your Preparation EXAM SUCCESS: https://drive.google.com/open?id=1VhcBgatq1BpmC2R4Fxr0h21MYon0HtLU