PAM-DEF Online Practice Questions and Answers

DRAG DROP

Match the Status of Services on a DR Vault to what is displayed when it is operating normally in Replication mode.

Select and Place:

You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account's password the CPM will.....

A. Log in to the system as root, then change root's password

B. Log in to the system as the logon account, then change roofs password

C. Log in to the system as the logon account, run the su command to log in as root, and then change root's password.

D. None of these

You are logging into CyberArk as the Master user to recover an orphaned safe. Which items are required to log in as Master?

A. Master CD, Master Password, console access to the Vault server, Private Ark Client

B. Operator CD, Master Password, console access to the PVWA server, PVWA access

C. Operator CD, Master Password, console access to the Vault server, Recover.exe

D. Master CD, Master Password, console access to the PVWA server, Recover.exe

Which user(s) can access all passwords in the Vault?

A. Administrator

B. Any member of Vault administrators

C. Any member of auditors

D. Master

When managing SSH keys, the CPM stored the Private Key

A. In the Vault

B. On the target server

C. A and B

D. Nowhere because the private key can always be generated from the public key.

What is the purpose of the HeadStartlnterval setting m a platform?

A. It determines how far in advance audit data is collected tor reports

B. It instructs the CPM to initiate the password change process X number of days before expiration.

C. It instructs the AIM Provider to `skip the cache' during the defined time period

D. It alerts users of upcoming password changes x number of days before expiration.

A recently-hired colleague onboarded five new Local Accounts that are used for five standalone Windows Servers. After attempting to connect to the servers from PVWA, the colleague noticed that the "Connect" button was greyed out for all five new accounts.

What can you do to help your colleague resolve this issue? (Choose two.)

A. Verify that the address field is populated with an IP or FQDN of each server.

B. Verify that the correct PSM connection component appears within account platform settings.

C. Verify that the address field is blank and that the correct PSM connection component appears within account platform settings.

D. Notify the Windows Team that created the new accounts that the CyberArk PAM solution is not designed to manage local accounts on Windows Servers.

E. Verify that the "Disable automatic management for this account" setting for each account is not enabled.

You notice an authentication failure entry for the DR user in the ITALog.

What is the correct process to fix this error? (Choose two.)

A. PrivateArk Client > Tools > Administrative Tools > Users and Groups > DR User > Update > Authentication > Update Password.

B. Create a new credential file, on the DR Vault, using the CreateCredFile utility and the newly set password. . Create a new credential file, on the Primary Vault, using the CreateCredFile utility and the newly set password.

C. PVWA > User Provisioning > Users and Groups > DR User > Update Password.

D. PrivateArk Client > Tools > Administrative Tools > Users and Groups > PAReplicate User > Update > Authentication > Update Password.

You are onboarding an account that is not supported out of the box. What should you do first to obtain a platform to import?

A. Create a service ticket in the customer portal explaining the requirements of the custom platform.

B. Search common community portals like stackoverflow, reddit, github for an existing platform.

C. From the platforms page, uncheck the "Hide non-supported platforms" checkbox and see if a platform meeting your needs appears.

D. Visit the CyberArk marketplace and search for a platform that meets your needs.

Secure Connect provides the following. Choose all that apply.

A. PSM connections to target devices that are not managed by CyberArk.

B. Session Recording

C. Real-time live session monitoring.

D. PSM connections from a terminal without the need to login to the PVWA