CyberArk GUARD - CyberArk Guardian Exam
Page: 1 / 12
Total 59 questions
Question #1 (Topic: Exam A)
Which type of approach is the most important for driving adoption and transformation of a successful Identity Security program?
A. Risk based approach
B. Security based approach
C. Top-down approach
D. Bottom up approach
Answer: C
Question #2 (Topic: Exam A)
What is the maximum number of Conjur Standbys that can be deployed inside an Auto-Failover cluster?
A. 3
B. 4
C. 5
D. 6
Answer: C
Question #3 (Topic: Exam A)
During phase 1 of the CyberArk Blueprint, what is the recommended action to take to manage service accounts?
A. Create new accounts specifically for the services and then swap them over.
B. Identify and remove unnecessary privilege's in AD or in local account.
C. Onboard the account to CyberArk and identify all usages, start rotation.
D. Create a safe design to onboard the Service accounts to and create platforms for usages.
Answer: C
Question #4 (Topic: Exam A)
How can password management of multiple flavors of Unix be handled in a single platform?
A. The Policies and Prompts files can be customized to handle different workflows for different Unix flavors.
B. You are not able to have more than one unix system type in a single platform.
C. You can change the platform settings to set up different Unix change commands through the Additional Policies section.
D. An account can be set up with an additional fields which includes the change and reconcile commands required.
Answer: A
Question #5 (Topic: Exam A)
A customer has a policy to deny all direct RDP access from their workstation network security zone to the server network security zone. Only HTTPS is allowed into the server network security zone.
What recommendation would you provide to the customer?
What recommendation would you provide to the customer?
A. Do not use the PSM. Allow end users to use the Show/Copy feature.
B. Request an exception to allow RDP access from the workstation network zone to the network security zone.
C. Provide to virtual desktop to each user. Users will access the PSM from the virtual desktop that sits within the server network security zone.
D. Deploy an HTML5 gateway in the server network security zone.
Answer: D