Try Free CyberArk Defender PAM-DEF Exam Questions To Test Yourself

test2022-07-30T02:36:07+00:00

By test CyberArk Defender – PAM, CyberArk Defender PAM-DEF Exam Questions, PAM-DEF free dumps, PAM-DEF practice exam, PAM-DEF questions and answers 0 Comments

If you consider taking the CyberArk Defender PAM-DEF exam, FreeTestShare will provide PAM-DEF Exam Questions covering actual exam questions and answers to help you pass the CyberArk Defender – PAM exam quickly! FreeTestShare CyberArk Defender PAM-DEF Exam Questions help you know about the topics easily! We provide free access to the most recent PAM-DEF Exam Questions and Answers. You can practice the most recent PAM-DEF exam questions online!

Try PAM-DEF practice test now to assess your prep level!

Page 1 of 5

1. Which values are acceptable in the address field of an Account?

It must be a Fully Qualified Domain Name (FQDN)

It must be an IP address

It must be NetBIOS name

Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable

2. Which of the following PTA detections are included in the Core PAS offering?

Suspected Credential Theft

Over-Pass-The Hash

Golden Ticket

Unmanaged Privileged Access

3. Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that apply.

PAR Agent

PrivateArk Server Central Administration

Edit DBParm.ini in a text editor.

Setup.exe

4. A user is receiving the error message “ITATS006E Station is suspended for User jsmith” when attempting to sign into the Password Vault Web Access (PVWA) .

Which utility would a Vault administrator use to correct this problem?

createcredfile.exe

cavaultmanager.exe

PrivateArk

PVWA

5. 1. user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings.

What is the issue?

The user must login as PSMAdminConnect

The PSM service is not running

The user is not a member of the PVWAMonitor group

The user is not a member of the Auditors group

6. It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

TRUE

FALS

7. You are onboarding an account that is not supported out of the box.

What should you do first to obtain a platform to import?

Create a service ticket in the customer portal explaining the requirements of the custom platform.

Search common community portals like stackoverflow, reddit, github for an existing platform.

From the platforms page, uncheck the “Hide non-supported platforms” checkbox and see if a platform meeting your needs appears.

Visit the CyberArk marketplace and search for a platform that meets your needs.

8. A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

True

False

9. What is the primary purpose of One Time Passwords?

Reduced risk of credential theft

More frequent password changes

Non-repudiation (individual accountability)

To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

10. In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

True.

False. Because the user can also enter credentials manually using Secure Connect.

False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSM Connect.

False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

Page 2 of 5

11. Which report could show all accounts that are past their expiration dates?

Privileged Account Compliance Status report

Activity log

Privileged Account Inventory report

Application Inventory report

12. Which option in the Private Ark client is used to update users’ Vault group memberships?

Update > General tab

Update > Authorizations tab

Update > Member Of tab

Update > Group tab

13. Users can be resulted to using certain CyberArk interfaces (e.g.PVWA or PACLI).

TRUE

FALS

14. In your organization the “click to connect” button is not active by default.

How can this feature be activated?

Policies > Master Policy > Allow EPV transparent connections > Inactive

Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception

Policies > Master Policy > Allow EPV transparent connections > Active

Policies > Master Policy > Password Management

15. Which is the primary purpose of exclusive accounts?

Reduced risk of credential theft

More frequent password changes

Non-repudiation (individual accountability)

To force a ‘collusion to commit’ fraud ensuring no single actor may use a password without authorization

16. The vault supports Role Based Access Control.

TRUE

FALSE

17. As long as you are a member of the Vault Admins group you can grant any permission on any safe.

TRUE

FALSE

18. In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system .

What is the BEST way to allow CPM to manage root accounts?

Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server’s root account.

Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server’s root account.

Configure the Unix system to allow SSH logins.

Configure the CPM to allow SSH logins.

19. Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

Accounts Discovery

Auto Detection

Onboarding RestAPI functions

PTA Rules

20. A Logon Account can be specified in the Master Policy.

TRUE

FALSE

Page 3 of 5

21. A new HTML5 Gateway has been deployed in your organization.

Where do you configure the PSM to use the HTML5 Gateway?

Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway

Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers

Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway

Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details

22. Which user is automatically added to all Safes and cannot be removed?

Auditor

Administrator

Master

Operator

23. DRAG DROP

Match the Status of Service on a DR Vault to what is displayed when it is operating normally in Replication mode.

24. Which item is an option for PSM recording customization?

Windows events text recorder with automatic play-back

Windows events text recorder and universal keystrokes recording simultaneously

Universal keystrokes text recorder with windows events text recorder disabled

Custom audio recording for windows events

25. Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply.

PSM connections to target devices that are not managed by CyberArk.

Session Recording.

Real-time live session monitoring.

PSM connections from a terminal without the need to login to the PVW

26. If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attached to the account?

KeyPath

KeyFile

ObjectName

Address

27. Accounts Discovery allows secure connections to domain controllers.

TRUE

FALSE

28. For Digital Vault Cluster in a high availability configuration, how does the cluster determine if a node is down?

The heartbeat s no longer detected on the private network.

The shared storage array is offline.

An alert is generated in the Windows Event log.

The Digital Vault Cluster does not detect a node failure.

29. Due to network activity, ACME Corp’s PrivateArk Server became active on the OR Vault while the Primary Vault was also running normally. All the components continued to point to the Primary Vault.

Which steps should you perform to restore DR replication to normal?

Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

Shutdown PrivateArk Server on Primary Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

Shutdown PrivateArk Server on DR Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

30. The Accounts Feed contains:

Accounts that were discovered by CyberArk in the last 30 days

Accounts that were discovered by CyberArk that have not yet been onboarded

All accounts added to the vault in the last 30 days

All users added to CyberArk in the last 30 days

Page 4 of 5

31. A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication.

Which locations must you update?

on the Vault server in WindowsSystem32EtcHosts and in the PVWA Application under Administration > LDAP Integration > Directories > Hosts

on the Vault server in WindowsSystem32EtcHosts and on the PVWA server in WindowsSystem32EtcHosts

in the Private Ark client under Tools > Administrative Tools > Directory Mapping

on the Vault server in the certificate store and on the PVWA server in the certificate store

32. When managing SSH keys, the CPM stored the Private Key

In the Vault

On the target server

A & B

Nowhere because the private key can always be generated from the public key.

33. PSM for Windows (previously known as “RDP Proxy”) supports connections to the following target systems

Windows

UNIX

Oracle

All of the above

34. Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed.

HeadStartInterval

Interval

ImmediateInterval

The CPM does not change the password under this circumstance

35. Which report shows the accounts that are accessible to each user?

Activity report

Entitlement report

Privileged Accounts Compliance Status report

Applications Inventory report

36. You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe Team1.

What do you need to recover and decrypt the object? (Choose three.)

Recovery Private Key

Recover.exe

Vault data

Recovery Public Key

Server Key

Master Password

37. A logon account can be specified in the platform settings.

True

False

38. Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.

HeadStartInterval

Interval

ImmediateInterval

The CPM does not change the password under this circumstance

39. You need to enable the PSM for all platforms.

Where do you perform this task?

Platform Management > (Platform) > UI & Workflows

Master Policy > Session Management

Master Policy > Privileged Access Workflows

Administration > Options > Connection Components

40. Which of the following statements are NOT true when enabling PSM recording for a target Windows server? (Choose all that apply)

The PSM software must be instated on the target server

PSM must be enabled in the Master Policy (either directly, or through exception)

PSMConnect must be added as a local user on the target server

RDP must be enabled on the target server

Page 5 of 5

41. You are creating a shared safe for the help desk.

What must be considered regarding the naming convention?

Ensure your naming convention is no longer than 20 characters.

Combine environments, owners and platforms to minimize the total number of safes created.

Safe owners should determine the safe name to enable them to easily remember it.

The use of these characters V:*<>".| is not allowed.

42. How much disk space do you need on the server for a PAReplicate?

500 GB

1 TB

same as disk size on Satellite Vault

same as disk size on Primary Vault

43. When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

True; this is the default behavior

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the padr.ini file

True, if the AllowFailback setting is set to “yes” in the padr.ini file

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the dbparm.ini file

44. What is the purpose of the Immediate Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how often the CPM rests between password changes.

To Control the maximum amount of time the CPM will wait for a password change to complete.

45. Which of the following components can be used to create a tape backup of the Vault?

Disaster Recovery

Distributed Vaults

Replicate

High Availability

Try Free CyberArk Defender PAM-DEF Exam Questions To Test Yourself

Try Free CyberArk Defender PAM-DEF Exam Questions To Test Yourself

Share this post

Author

Leave a Reply Cancel reply

Related Posts

Try Free CyberArk PAM-DEF-SEN Exam Questions With Verified Answers