PAM-DEF Exam Questions

The Active Directory User configured for Windows Discovery needs which permission(s) or membership?

Which command generates a full backup of the Vault?

You have been asked to create an account group and assign three accounts which belong to a cluster. When you try to create a new group, you receive an unauthorized error; however,...

How do you create a cold storage backup?

Where can you assign a Reconcile account? (Choose two.)

You notice an authentication failure entry for the DR user in the ITALog. What is the correct process to fix this error? (Choose two.)

Refer to the exhibit. Why is user "EMEALevel2Support" unable to change the password for user "Operator"?

What is required to enable access over SSH to a Unix account through both PSM and PSMP?

What are the minimum permissions to add multiple accounts from a file when using PVWA bulk- upload? (Choose three.)

What is the correct process to install a custom platform from the CyberArk Marketplace?

You are configuring a Vault HA cluster. Which file should you check to confirm the correct drives have been assigned for the location of the Quorum and Safes data disks?

In the Private Ark client under the Tools menu > Administrative Tools > Users and Groups, which option do you use to update users' Vault group memberships?

Where can you check that the LDAP binding is using TCP/636?

How much disk space do you need on a server to run a full replication with PAReplicate?

What does the minvalidity parameter on a platform policy determine?

Which master policy settings ensure non-repudiation?

What can you do to ensure each component server is operational?

Before failing back to the production infrastructure after a DR exercise, what must you do to maintain audit history during the DR event?

Which setting in the Master Policy controls whether PSM is enabled and sessions will be recorded?

You have been given the requirement that certain accounts cannot have their passwords updated during business hours. How can you set up a configuration to meet this requirement?

Which Vault authorization does a user need to have assigned to able to generate the "Entitlement Report" from the reports page in PVWA? (Choose two.)

When the CPM connects to a database, which interface is most commonly used?

Which statement is true about setting the reconcile account at the platform level?

You are configuring CyberArk to use HTML5 gateways exclusively for PSM connections. In the PVWA, where do you set DefaultConnectionMethod to HTML5?

A recently-hired colleague onboarded five new Local Accounts that are used for five standalone Windows Servers. After attempting to connect to the servers from PVWA, the colleague...

Which statement about the Master Policy best describes the differences between one-time password and exclusive access functionality?

Which tools can you use to identify the machines and accounts that create the highest risk and are exposed to lateral movement? (Choose two.)

You are adding a new application in the Remote Access portal. Which authentication methods can you use to authenticate users to the PVWA? (Choose two.)

You need to identity the most powerful accounts in your organization to prepare for the initial PAM onboarding process. Which tools or features can be used to locate and onboard th...

Where can you find resources to learn more about the CyberArk Blueprint? (Choose two.)

What are valid ways to invite vendors using the Remote Access portal? (Choose two.)

A company has multiple business units that have their own set of vendors. Each business unit has a distinct role to manage vendor access. The business units want to have full contr...

What are common ways that organizations leverage the CyberArk Blueprint for Identity Security Success? (Choose three.)