PAM-DEF Exam Questions

If a user is a member of more than one group that has authorizations on a safe, by default that user is granted________.

It is possible to control the hours of the day during which a user may log into the vault.

VAULT authorizations may be granted to_____.

What is the purpose of the Interval setting in a CPM policy?

All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be ab...

What is the purpose of the Immediate Interval setting in a CPM policy?

Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that apply.

A Logon Account can be specified in the Master Policy.

For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.

Which report provides a list of account stored in the vault.

When on-boarding account using Accounts Feed, Which of the following is true?

Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

Which one the following reports is NOT generated by using the PVWA?

PSM captures a record of each command that was executed in Unix.

Platform settings are applied to _________.

Customers who have the `Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the accoun...

What is the name of the Platform parameters that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

It is possible to leverage DNA to provide discovery functions that are not available with auto- detection.

Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.

Users can be resulted to using certain CyberArk interfaces (e.g.PVWA or PACLI).

What is the purpose of the HeadStartlnterval setting m a platform?

It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

Which of the following options is not set in the Master Policy?

The primary purpose of exclusive accounts is to ensure non-repudiation (Individual accountability).

The System safe allows access to the Vault configuration files.

You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account's password the CPM will.....

It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur

Which of the Following can be configured in the Master Poky? Choose all that apply.

If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

What is the maximum number of levels of authorization you can set up in Dual Control?

As long as you are a member of the Vault Admins group you can grant any permission on any safe.

In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.

Which of the following statements are NOT true when enabling PSM recording for a target Windows server? (Choose all that apply)

The Password upload utility can be used to create safes.

Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

A Reconcile Account can be specified in the Master Policy.

In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

SAFE Authorizations may be granted to____________. Select all that apply.

Secure Connect provides the following. Choose all that apply.

Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

What is the purpose of a linked account?

Which of the following PTA detections are included in the Core PAS offering?

One can create exceptions to the Master Policy based on ____________________.

The vault supports Role Based Access Control.

Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?

A user with administrative privileges to the vault can only grant other users privileges that he himself has.

By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.