PAM-DEF Exam Questions

You are creating a new Rest API user that utilizes CyberArk Authentication. What is a correct process to provision this user?

Which command configures email alerts within PTA if settings need to be changed post install?

Which permissions are needed for the Active Directory user required by the Windows Discovery process?

To manage automated onboarding rules, a CyberArk user must be a member of which group?

Your organization has a requirement to allow users to "check out passwords" and connect to targets with the same account through the PSM. What needs to be configured in the Master...

When onboarding multiple accounts from the Pending Accounts list, which associated setting must be the same across the selected accounts?

In PVWA, you are attempting to play a recording made of a session by user jsmith, but there is no option to "Fast Forward" within the video. It plays and only allows you to skip be...

If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attach...

You received a notification from one of your CyberArk auditors that they are missing Vault level audit permissions. You confirmed that all auditors are missing the Audit Users Vaul...

A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication. Which locations must you...

Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?

Which item is an option for PSM recording customization?

Your customer, ACME Corp, wants to store the Safes Data in Drive D instead of Drive C. Which file should you edit?

Which option in the Private Ark client is used to update users' Vault group memberships?

Which of the following properties are mandatory when adding accounts from a file? (Choose three.)

Which Automatic Remediation is configurable for a PTA detection of a "Suspected Credential Theft"?

Users are unable to launch Web Type Connection components from the PSM server. Your manager asked you to open the case with CyberArk Support. Which logs will help the CyberArk Supp...

What do you need on the Vault to support LDAP over SSL?

You are troubleshooting a PVWA slow response. Which log files should you analyze first? (Choose two.)

Due to corporate storage constraints, you have been asked to disable session monitoring and recording for 500 testing accounts used for your lab environment. How do you accomplish...

What must you specify when configuring a discovery scan for UNIX? (Choose two.)

To change the safe where recordings are kept for a specific platform, which setting must you update in the platform configuration?

Which processes reduce the risk of credential theft? (Choose two.)

Which methods can you use to add a user directly to the Vault Admin Group? (Choose three.)

You want to create a new onboarding rule. Where do you accomplish this?

What does the Export Vault Data (EVD) utility do?

When are external vault users and groups synchronized by default?

You created a new safe and need to ensure the user group cannot see the password, but can connect through the PSM. Which safe permissions must you grant to the group? (Choose two.)

During a High Availability node switch you notice an error and the Cluster Vault Manager Utility fails back to the original node. Which log files should you check to investigate th...

Where can a user with the appropriate permissions generate a report? (Choose two.)

A new colleague created a directory mapping between the Active Directory groups and the Vault. Where can the newly Configured directory mapping be tested?

A user needs to view recorded sessions through the PVWA. Without giving auditor access, which safes does a user need access to view PSM recordings? (Choose two.)

Which file must be edited on the Vault to configure it to send data to PTA?

You want to build a connector that connects to a website through the Web applications for PSM framework. Which default connector do you duplicate and modify?

When an account is unable to change its own password, how can you ensure that password reset with the reconcile account is performed each time instead of a change?

According to CyberArk, which issues most commonly cause installed components to display as disconnected in the System Health Dashboard? (Choose two.)

Where can reconcile and/or logon accounts be linked to an account? (Choose two.)

Which dependent accounts does the CPM support out-of-the-box? (Choose three.)

A password compliance audit found: 1) One-time password access of 20 domain accounts that are members of Domain Admins group in Active Directory are not being enforced. 2) All the...

If PTA is integrated with a supported SIEM solution, which detection becomes available?

Which change could CyberArk make to the REST API that could cause existing scripts to fail?

You created a new platform by duplicating the out-of-box Linux through the SSH platform. Without any change, which Text Recorder Type(s) will the new platform support? (Choose two....

In addition to add accounts and update account contents, which additional permission on the safe is required to add a single account?

You want to give a newly-created group rights to review security events under the Security pane. You also want to be able to update the status of these events. Where must you updat...

What is required to manage loosely connected devices?

When should vault keys be rotated?

Where can PTA be configured to send alerts? (Choose two.)

What are the mandatory fields when onboarding from Pending Accounts? (Choose two.)

Which accounts can be selected for use in the Windows discovery process? (Choose two.)

You are concerned about the Windows Domain password changes occurring during business hours. Which settings must be updated to ensure passwords are only rotated outside of business...