The New PAM-DEF 2023 Updated Verified Study Guides & Best Courses
Authentic PAM-DEF Exam Dumps PDF - 2023 Updated
NEW QUESTION 40
Which user is automatically added to all Safes and cannot be removed?
- A. Auditor
- B. Master
- C. Operator
- D. Administrator
Answer: B
NEW QUESTION 41
What is the purpose of the Interval setting in a CPM policy?
- A. To control the maximum amount of time the CPM will wait for a password change to complete.
- B. To control how often the CPM looks for System Initiated CPM work.
- C. To control how long the CPM rests between password changes.
- D. To control how often the CPM looks for User Initiated CPM work.
Answer: B
NEW QUESTION 42
When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.
- A. True, if the AllowFailback setting is set to "yes" in the padr.ini file
- B. True; this is the default behavior
- C. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file
- D. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the dbparm.ini file
Answer: C
NEW QUESTION 43
In PVWA, you are attempting to play a recording made of a session by user jsmith, but there is no option to "Fast Forward" within the video. It plays and only allows you to skip between commands instead. You are also unable to download the video.
What could be the cause?
- A. You need to update the recorder settings in the platform to enable screen capture every 10000 ms or less.
- B. You do not have the "View Audit" permission on the safe where the account is stored.
- C. The browser you are using is out of date and needs an update to be supported.
- D. Recording is of a PSM for SSH session.
Answer: C
NEW QUESTION 44
A newly created platform allows users to access a Linux endpoint. When users click to connect, nothing happens.
Which piece of the platform is missing?
- A. PSM-SSH Connection Component
- B. UnixPrompts.ini
- C. UnixProcess.ini
- D. PSM-RDP Connection Component
Answer: D
NEW QUESTION 45
Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp. When the client's machine makes an RDP connection to the PSM server, which user will be utilized?
- A. Shadowuser
- B. PSMAdminConnect
- C. PSMConnect
- D. Credentials stored in the Vault for the target machine
Answer: C
NEW QUESTION 46
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)
- A. Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions
- B. Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions
- C. Copy the entire contents of the CD to the system Safe on the Vault
- D. Store the CD in a physical safe and mount the CD every time Vault maintenance is performed
Answer: A,B,C
NEW QUESTION 47
DRAG DROP
Match the Status of Service on a DR Vault to what is displayed when it is operating normally in Replication mode.
Answer:
Explanation:
running
Cyber-Ark Hardened Windows Firewall
PrivateArk Database
CyberArk Vault Disaster Recovery
stopped
Cyber-Ark Event Notification Engine
PrivateArk Server
NEW QUESTION 48
It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur
- A. TRUE
- B. FALS
Answer: A
NEW QUESTION 49
For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.
- A. On the safe in which the account is stored grant the group the' Access safe without audit' authorization.
- B. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization.
- C. Create an exception to the Master Policy to exclude the group from the workflow process.
- D. Edith the master policy rule and modify the advanced' Access safe without approval' rule to include the group.
Answer: B
NEW QUESTION 50
Which is the primary purpose of exclusive accounts?
- A. Non-repudiation (individual accountability)
- B. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization
- C. More frequent password changes
- D. Reduced risk of credential theft
Answer: A
NEW QUESTION 51
Time of day or day of week restrictions on when password verifications can occur configured in
____________________.
- A. The Platform settings
- B. The Safe settings
- C. The Account Details
- D. The Master Policy
Answer: A
NEW QUESTION 52
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)
- A. Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions
- B. Copy the entire contents of the CD to the system Safe on the Vault
- C. Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions
- D. Store the CD in a physical safe and mount the CD every time Vault maintenance is performed
Answer: A,C,D
NEW QUESTION 53
Which keys are required to be present in order to start the PrivateArk Server service?
- A. Safe key
- B. Server key
- C. Recovery public key
- D. Recovery private key
Answer: B,C
NEW QUESTION 54
Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.
- A. The CPM does not change the password under this circumstance
- B. HeadStartInterval
- C. ImmediateInterval
- D. Interval
Answer: D
NEW QUESTION 55
A Vault administrator have associated a logon account to one of their Unix root accounts in the vault. When attempting to verify the root account's password the Central Policy Manager (CPM) will:
- A. prompt the end user with a dialog box asking for the login account to use
- B. ignore the logon account and attempt to log in as root
- C. log in first with the logon account, then run the SU command to log in as root using the password in the Vault
- D. none of these
Answer: A
NEW QUESTION 56
What is the purpose of the CyberArk Event Notification Engine service?
- A. It processes audit report messages
- B. It sends email messages from the Central Policy Manager (CPM)
- C. It sends email messages from the Vault
- D. It makes Vault data available to components
Answer: C
NEW QUESTION 57
You are logging into CyberArk as the Master user to recover an orphaned safe.
Which items are required to log in as Master?
- A. Master CD, Master Password, console access to the PVWA server, Recover.exe
- B. Operator CD, Master Password, console access to the Vault server, Recover.exe
- C. Operator CD, Master Password, console access to the PVWA server, PVWA access
- D. Master CD, Master Password, console access to the Vault server, Private Ark Client
Answer: D
NEW QUESTION 58
Which of the following components can be used to create a tape backup of the Vault?
- A. Disaster Recovery
- B. Distributed Vaults
- C. High Availability
- D. Replicate
Answer: D
NEW QUESTION 59
PSM captures a record of each command that was executed in Unix.
- A. FALSE
- B. TRIE
Answer: B
NEW QUESTION 60
What is the purpose of the CyberArk Event Notification Engine service?
- A. It makes Vault data available to components
- B. It processes audit report messages
- C. It sends email messages from the Central Policy Manager (CPM)
- D. It sends email messages from the Vault
Answer: A
NEW QUESTION 61
SAFE Authorizations may be granted to____________.
Select all that apply.
- A. Vault Group
- B. LDAP Groups
- C. LDAP Users
- D. Vault Users
Answer: A,B,C,D
NEW QUESTION 62
Select the best practice for storing the Master CD.
- A. Copy the files to the Vault server and discard the CD
- B. Copy the contents of the CD to a Hardware Security Module (HSM) and discard the CD
- C. Store the CD in a secure location, such as a physical safe
- D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder secured with NTFS permissions on the Vault
Answer: D
NEW QUESTION 63
A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings.
What is the issue?
- A. The user is not a member of the Auditors group
- B. The user is not a member of the PVWAMonitor group
- C. The PSM service is not running
- D. The user must login as PSMAdminConnect
Answer: A
NEW QUESTION 64
......
Get Prepared for Your PAM-DEF Exam With Actual 180 Questions: https://www.certkingdompdf.com/PAM-DEF-latest-certkingdom-dumps.html