CyberArk PAM-DEF Dumps - The Sure Way To Pass Exam [Q74-Q98]

Rate this post

CyberArk PAM-DEF Dumps – The Sure Way To Pass Exam

PAM-DEF Exam Questions (Updated 2023) 100% Real Question Answers

QUESTION 74
Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?

They are added to the Pending Accounts list and can be reviewed and manually uploaded.

They cannot be onboarded to the Password Vault.

They must be uploaded using third party tools.

They are not part of the Discovery Process.

QUESTION 75
A Logon Account can be specified in the Master Policy.

TRUE

FALSE

QUESTION 76
Which report shows the accounts that are accessible to each user?

Activity report

Entitlement report

Privileged Accounts Compliance Status report

Applications Inventory report

QUESTION 77
It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur

TRUE

FALSE

QUESTION 78
What is the purpose of the HeadStartlnterval setting m a platform?

It determines how far in advance audit data is collected tor reports

It instructs the CPM to initiate the password change process X number of days before expiration.

It instructs the AIM Provider to ‘skip the cache’ during the defined time period

It alerts users of upcoming password changes x number of days before expiration.

QUESTION 79
The vault supports Role Based Access Control.

TRUE

FALSE

Explanation
Reference
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Object-Level-Access-Cont

QUESTION 80
Which one the following reports is NOT generated by using the PVWA?

Accounts Inventory

Application Inventory

Sales List

Convince Status

QUESTION 81
A Logon Account can be specified in the Master Policy.

TRUE

FALSE

QUESTION 82
It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

TRUE

FALS

QUESTION 83
Match each permission to where it can be found.

QUESTION 84
When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

True; this is the default behavior

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the padr.ini file

True, if the AllowFailback setting is set to “yes” in the padr.ini file

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the dbparm.ini file

QUESTION 85
Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

Accounts Discovery

Auto Detection

Onboarding RestAPI functions

PTA Rules

QUESTION 86
Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

Suspected credential theft

Over-Pass-The-Hash

Golden Ticket

Unmanaged privileged access

QUESTION 87
dbparm.ini is the main configuration file for the Vault.

True

False

QUESTION 88
The vault supports Subnet Based Access Control.

TRUE

FALSE

QUESTION 89
Match the connection component to the corresponding OS/Function.

QUESTION 90
You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to
[b]change [/b] the root account’s password the CPM will…..

None of these

QUESTION 91
How much disk space do you need on the server for a PAReplicate?

500 GB

1 TB

same as disk size on Satellite Vault

same as disk size on Primary Vault

QUESTION 92
Time of day or day of week restrictions on when password verifications can occur configured in ____________________.

The Master Policy

The Platform settings

The Safe settings

The Account Details

QUESTION 93
To enable the Automatic response “Add to Pending” within PTA when unmanaged credentials are found, what are the minimum permissions required by PTAUser for the PasswordManager_pending safe?

List Accounts, View Safe members, Add accounts (includes update properties), Update Account content, Update Account properties

List Accounts, Add accounts (includes update properties), Delete Accounts, Manage Safe

Add accounts (includes update properties), Update Account content, Update Account properties, View Audit

View Accounts, Update Account content, Update Account properties, Access Safe without confirmation, Manage Safe, View Audit

QUESTION 94
In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.

Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server’s root account.

Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server’s root account.

Configure the Unix system to allow SSH logins.

Configure the CPM to allow SSH logins.

QUESTION 95
A user is receiving the error message “ITATS006E Station is suspended for User jsmith” when attempting to sign into the Password Vault Web Access (PVWA) .
Which utility would a Vault administrator use to correct this problem?

createcredfile.exe

cavaultmanager.exe

PrivateArk

PVWA

QUESTION 96
In your organization the “click to connect” button is not active by default.
How can this feature be activated?

Policies > Master Policy > Allow EPV transparent connections > Inactive

Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception

Policies > Master Policy > Allow EPV transparent connections > Active

Policies > Master Policy > Password Management

QUESTION 97
If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attached to the account?

KeyPath

KeyFile

ObjectName

Address

QUESTION 98
A Reconcile Account can be specified in the Master Policy.

TRUE

FALSE

Loading …