[Sep-2022] PAM-DEF Exam Questions and Valid PAM-DEF Dumps PDF
PAM-DEF Brain Dump: A Study Guide with Tips & Tricks for passing Exam
NEW QUESTION 108
Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION 109
In a rule using "Privileged Session Analysis and Response" in PTA, which session options are available to configure as responses to activities?
- A. Pause, Terminate, None
- B. Suspend, Terminate
- C. Suspend, Terminate, None
- D. Suspend, Terminate, Lock Account
Answer: B
NEW QUESTION 110
What is the purpose of the Immediate Interval setting in a CPM policy?
- A. To control how often the CPM rests between password changes.
- B. To control how often the CPM looks for User Initiated CPM work.
- C. To control how often the CPM looks for System Initiated CPM work.
- D. To Control the maximum amount of time the CPM will wait for a password change to complete.
Answer: B
NEW QUESTION 111
PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.
- A. False, the PTA can suspend sessions whether the session is made via the PSM or not
- B. True
Answer: A
NEW QUESTION 112
CyberArk recommends implementing object level access control on all Safes.
- A. False
- B. True
Answer: A
NEW QUESTION 113
Which of the following PTA detections are included in the Core PAS offering?
- A. Golden Ticket
- B. Unmanaged Privileged Access
- C. Suspected Credential Theft
- D. Over-Pass-The Hash
Answer: B
NEW QUESTION 114
When managing SSH keys, the CPM stores the Public Key
- A. Nowhere because the public key can always be generated from the private key.
- B. A & B
- C. On the target server
- D. In the Vault
Answer: C
NEW QUESTION 115
To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?
- A. List Accounts, Use Accounts, Retrieve Accounts
- B. List Accounts, Use Accounts
- C. List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation
- D. Use Accounts
Answer: B
NEW QUESTION 116
It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.
- A. TRUE
- B. FALS
Answer: A
NEW QUESTION 117
Which CyberArk group does a user need to be part of to view recordings or live monitor sessions?
- A. DR Users
- B. Operators
- C. Auditors
- D. Vault Admin
Answer: C
NEW QUESTION 118
In PVWA, you are attempting to play a recording made of a session by user jsmith, but there is no option to "Fast Forward" within the video. It plays and only allows you to skip between commands instead. You are also unable to download the video.
What could be the cause?
- A. You do not have the "View Audit" permission on the safe where the account is stored.
- B. You need to update the recorder settings in the platform to enable screen capture every 10000 ms or less.
- C. The browser you are using is out of date and needs an update to be supported.
- D. Recording is of a PSM for SSH session.
Answer: C
NEW QUESTION 119
Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp.
When the client's machine makes an RDP connection to the PSM server, which user will be utilized?
- A. Credentials stored in the Vault for the target machine
- B. PSMAdminConnect
- C. PSMConnect
- D. Shadowuser
Answer: C
NEW QUESTION 120
VAULT authorizations may be granted to_____.
- A. LDAP Users
- B. LDAP Groups
- C. Vault Groups
- D. Vault Users
Answer: A,D
NEW QUESTION 121
What is the configuration file used by the CPM scanner when scanning UNIX/Linux devices?
- A. dbparm.ini
- B. PVConfig.xml
- C. plink.exe
- D. UnixPrompts.ini
Answer: D
NEW QUESTION 122
Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION 123
Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?
- A. Session suspension
- B. Password reconciliation
- C. Session termination
- D. Password change
Answer: D
NEW QUESTION 124
You are logging into CyberArk as the Master user to recover an orphaned safe.
Which items are required to log in as Master?
- A. Master CD, Master Password, console access to the Vault server, Private Ark Client
- B. Master CD, Master Password, console access to the PVWA server, Recover.exe
- C. Operator CD, Master Password, console access to the Vault server, Recover.exe
- D. Operator CD, Master Password, console access to the PVWA server, PVWA access
Answer: A
NEW QUESTION 125
In your organization the "click to connect" button is not active by default.
How can this feature be activated?
- A. Policies > Master Policy > Password Management
- B. Policies > Master Policy > Allow EPV transparent connections > Inactive
- C. Policies > Master Policy > Allow EPV transparent connections > Active
- D. Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception
Answer: C
NEW QUESTION 126
Which one the following reports is NOT generated by using the PVWA?
- A. Application Inventory
- B. Accounts Inventory
- C. Convince Status
- D. Sales List
Answer: D
NEW QUESTION 127
Which certificate type do you need to configure the vault for LDAP over SSL?
- A. a self-signed Certificate for the Vault
- B. a CA signed Certificate for the Vault server
- C. the CA Certificate that signed the certificate used by the External Directory
- D. a CA signed Certificate for the PVWA server
Answer: C
NEW QUESTION 128
You are onboarding an account that is not supported out of the box.
What should you do first to obtain a platform to import?
- A. From the platforms page, uncheck the "Hide non-supported platforms" checkbox and see if a platform meeting your needs appears.
- B. Visit the CyberArk marketplace and search for a platform that meets your needs.
- C. Create a service ticket in the customer portal explaining the requirements of the custom platform.
- D. Search common community portals like stackoverflow, reddit, github for an existing platform.
Answer: C
NEW QUESTION 129
DRAG DROP
Match each PTA alert category with the PTA sensors that collect the data for it.
Answer:
Explanation:
Vault
suspicious activities detected in a privileged session
Logs, Vault, AwS (optional), Azure (optional)
suspected credentials theft
Logs, Vault, AD(optional), Aws(optional), Azure (optional)
unmanaged privileged account
Network Sensor,PTA Windows Agent
anomalous access to multiple machines
NEW QUESTION 130
......
PAM-DEF Exam Questions: Free PDF Download Recently Updated Questions: https://examtorrent.actualcollection.com/PAM-DEF-exam-questions.html