CyberArk GUARD - CyberArk Guardian Exam
Page: 3 / 12
Total 59 questions
Question #11 (Topic: Exam A)
Communication is an integral part of any PAM program, this includes these two things. (Choose two.)
A. Getting buy-in from leadership and communicating this from the first stakeholder meeting.
B. Allowing each level to develop their own messaging so that we can build a specific message catered to each group's goals: leadership, management, different organizations, IT Administrators, etc..
C. Developing a PAM sponsor to evangelize the project goals with the CTO and the entire technology organization.
D. "One and Done" communication so we don't overwhelm users.
E. Developing all training materials in Stage 2 of the program so that we can include 'lessons learned'.
Answer: AC
Question #12 (Topic: Exam A)
The enterprise-sized client has a large team of 10 vault admins. Following the principle of least privilege, you've guided the client to create separate local CyberArk accounts to manage CyberArk. You've created an account simply called "VaultAdmin" for activities such as deploying a new platform, and "SafeAdmin" for only creating and managing safes. We will then add 'SafeAdmin' to all of the target account safes. You then give access to the 'VaultAdmin' account to 5 vault admins, and give access to the other 5 vault admins to only use the 'SafeAdmin' account.
The main benefit of this is:
The main benefit of this is:
A. To follow the principle of Least Privilege.
B. To follow the principle of separation of duties.
C. To follow the principles of both least privilege and separation of duties.
D. 'SafeAdmin' now has full access to view the passwords stored in all of the safes, removing this access that is generally granted natively to the 'VaultAdmin' team.
Answer: C
Question #13 (Topic: Exam A)
A customer has a large deployment comprising of 4 VAULTs, 6 PVWAs, 5 CPMs and 6PSMs. You have been asked by the support team to submit logs and configuration files for each of the components.
How would you get the files in the most efficient manner?
How would you get the files in the most efficient manner?
A. Use PAS Reporter to gather the logs and configuration files. Upload the PAS reporter database to the support ticket.
B. Use CyberArk xRay.
C. Use CyberArk zBang.
D. Gather the logs and configuration files from each server manually.
Answer: B
Question #14 (Topic: Exam A)
You want to receive notification when password is used. You configured NFNotifyOnPasswordUsed in the Notification parameters of the platform.
Which of these two use cases will result in the notification being sent? (Choose two.)
Which of these two use cases will result in the notification being sent? (Choose two.)
A. When a user copies the password from the PVWA Ul.
B. When the credential is first onboarded and assigned to the platform.
C. When a user clicks 'Verify' to verify the password via the PVWA Ul.
D. When user connects using PSM for SSH.
E. When user logs on and clicks connect from the PVWA Ul.
Answer: AD
Question #15 (Topic: Exam A)
ClientABC is building a PSM farm with 2 servers. They want to use a physical load balancer and want to configure it for least connections.
What is also required as part of the configuration?
What is also required as part of the configuration?
A. Deploy the PSM Healthcheck integration on 1 of the 2 PSM servers. This acts as a centralized healthcheck for both servers.
B. Deploy the PSM Healthcheck integration on both of the 2 PSM servers. Ensure the load balancer uses this URL.
C. This is not a supported configuration, PSM only supports round robin load balancing.
D. Deploy the PSM Healthcheck, however without the load balancer, CyberArk is able to load balance the PSMs internally.
Answer: B
