CyberArk Defender - PAM - PAM-DEF FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

The vault supports Subnet Based Access Control.

A. FALSE B. TRUE

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Which one the following reports is NOT generated by using the PVWA?

A. Convince Status B. Sales List C. Application Inventory D. Accounts Inventory

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

A. False, the PTA can suspend sessions whether the session is made via the PSM or not B. True

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.
How are these keys managed?

A. CyberArk stores Public keys in the Vault and updates Private keys on target systems. B. CyberArk stores both Private and Public keys and can update target systems with either key. C. CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand. D. CyberArk stores Private keys in the Vault and updates Public keys on target systems.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.

A. Configure the CPM to allow SSH logins. B. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account. C. Configure the Unix system to allow SSH logins. D. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server's root account.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

tsparm.ini is the main configuration file for the Vault.

A. True B. False

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

A recently-hired colleague onboarded five new Local Accounts that are used for five standalone Windows Servers. After attempting to connect to the servers from PVWA, the colleague noticed that the "Connect" button was greyed out for all five new accounts.
What can you do to help your colleague resolve this issue? (Choose two.)

A. Notify the Windows Team that created the new accounts that the CyberArk PAM solution is not designed to manage local accounts on Windows Servers. B. Verify that the "Disable automatic management for this account" setting for each account is not enabled. C. Verify that the address field is blank and that the correct PSM connection component appears within account platform settings. D. Verify that the correct PSM connection component appears within account platform settings. E. Verify that the address field is populated with an IP or FQDN of each server.

Discussion 0

Correct Answer: B,D,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Match each permission to where it can be found.

Discussion 0

Correct Answer:

Explanation
* Add Accounts --> Safe
* Initiate CPM account management operations -> Safe
* Add/Update Users -> Vault
* Add Safes -> Vault
Comprehensive Explanation:
* Add Accounts: This permission is associated with the ability to add new accounts to the CyberArk Vault. It is typically found in the Vault's administrative settings where account management is handled.
* Initiate CPM account management operations: This permission allows users to initiate operations related to the Central Policy Manager (CPM) for account management within a Safe. It is found in the Safe's permissions settings.
* Add/Update Users: This permission enables the addition or updating of user information in the Vault. It is found in the Vault's user management settings.
* Add Safes: This permission is related to the creation of new Safes in the Vault. It is found in the Vault's administrative settings where Safe management is conducted.
References:
* The permissions and their locations can be referenced in the CyberArk Defender PAM course materials and official documentation, which provide detailed information on the management of permissions within the CyberArk solution.

Question 9

Users who have the 'Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

A. FALSE B. TRUE

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

Which keys are required to be present in order to start the PrivateArk Server service?

A. Server key B. Recovery private key C. Safe key D. Recovery public key

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 11

Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?

A. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component. B. Yes, if a logon account is associated with the root account. C. No, it is not possible. D. Yes, when using the connect button, CyberArk uses the PMTerminal.exe process which bypasses the root SSH restriction.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 12

A logon account can be specified in the platform settings.

A. True B. False

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 13

A user is receiving the error message "ITATS006E Station is suspended for User jsmith" when attempting to sign into the Password Vault Web Access (PVWA). Which utility would a Vault administrator use to correct this problem?

A. PVWA B. PrivateArk C. cavaultmanager.exe D. createcredfile.exe

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 14

Refer to the exhibit.

Why is user "EMEALevel2Support" unable to change the password for user "Operator"?

A. EMEALevel2Support's hierarchy level is not the same or higher than Operator. B. Operator can only be reset by the Master user. C. EMEALevel2Support does not have rights to reset passwords for other users. D. EMEALevel2Support does not have the "Manage Directory Mapping" role.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).