PAM-DEF by CyberArk Valid Free Exam Practice Test

Question 1

As long as you are a member of the Vault Admins group you can grant any permission on any safe.

A. FALSE B. TRUE

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Which user is automatically added to all Safes and cannot be removed?

A. Operator B. Auditor C. Administrator D. Master

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

Time of day or day of week restrictions on when password verifications can occur configured in
____________________.

A. The Safe settings B. The Master Policy C. The Account Details D. The Platform settings

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Users who have the 'Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

A. FALSE B. TRUE

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

A. FALSE B. TRUE

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.
How are these keys managed?

A. CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand. B. CyberArk stores Private keys in the Vault and updates Public keys on target systems. C. CyberArk stores both Private and Public keys and can update target systems with either key. D. CyberArk stores Public keys in the Vault and updates Private keys on target systems.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

When managing SSH keys, the CPM stored the Private Key

A. On the target server B. Nowhere because the private key can always be generated from the public key. C. In the Vault D. A & B

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

What does the minvalidity parameter on a platform policy determine?

A. time in minutes before an empty safe will be automatically deleted B. timeout for users signed into the PVWA as configured in the global settings C. minimum amount of time that Just in Time access is valid D. time between a password retrieval and the account becoming eligible for a password change

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

Which statement about the Master Policy best describes the differences between one-time password and exclusive access functionality?

A. Exclusive access allows only one person to check-out an account at a time. One-time password schedules an account for a password change after the MinValidityPeriod period expires. B. Exclusive access is enabled by default in the Master Policy. One-time password should only be enabled for emergencies. C. Exclusive access means that only a specific group of users may use the account. After an account on a one-time password platform is used, the account is deleted from the safe automatically. D. Exclusive access locks the account indefinitely. One-time password can be used replace invalid account passwords.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 10

You received a notification from one of your CyberArk auditors that they are missing Vault level audit permissions. You confirmed that all auditors are missing the Audit Users Vault permission.
Where do you update this permission for all auditors?

A. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Vault Authorizations B. PVWA User Provisioning > LDAP integration > Vault Auditors Mapping > Vault Authorizations C. Private Ark Client > Tools > Administrative Tools > Users and Groups > Auditors > Authorizations tab D. PVWA> Administration > Configuration Options > LDAP integration > Vault Auditors Mapping > Vault Authorizations

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 11

By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

A. Auditors B. Security Operators C. Vault Admins D. Security Admins

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 12

You have been asked to turn off the time access restrictions for a safe.
Where is this setting found?

A. RestAPI B. Vault C. PrivateArk Client D. PVWA

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

CyberArk Defender - PAM - PAM-DEF Exam Practice Test