CyberArk PAM-DEF - CyberArk Defender – PAM Exam
Page: 2 / 23
Total 113 questions
Question #6 (Topic: Exam A)
A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request.
What is the correct location to identify users or groups who can approve?
What is the correct location to identify users or groups who can approve?
A. PVWA > Administration > Platform Configuration > Edit Platform > UI & Workflow > Dual Control > Approvers
B. PVWA > Policies > Access Control (Safes) > Select the safe > Safe Members > Workflow > Authorize Password Requests
C. PVWA > Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers
D. PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)
Answer: B
Question #7 (Topic: Exam A)
What must you specify when configuring a discovery scan for UNIX? (Choose two.)
A. Vault Administrator
B. CPM Scanner
C. root password for each machine
D. list of machines to scan
E. safe for discovered accounts
Answer: BD
Question #8 (Topic: Exam A)
To change the safe where recordings are kept for a specific platform, which setting must you update in the platform configuration?
A. SessionRecorderSafe
B. SessionSafe
C. RecordingsPath
D. RecordingLocation
Answer: A
Question #9 (Topic: Exam A)
Which processes reduce the risk of credential theft? (Choose two.)
A. require dual control password access approval
B. require password change every X days
C. enforce check-in/check-out exclusive access
D. enforce one-time password access
Answer: BD
Question #10 (Topic: Exam A)
You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.
How can this be configured to allow for password management using least privilege?
How can this be configured to allow for password management using least privilege?
A. Configure each CPM to use the correct logon account.
B. Configure each CPM to use the correct reconcile account.
C. Configure the UNIX platform to use the correct logon account.
D. Configure the UNIX platform to use the correct reconcile account.
Answer: C
