PAM-DEF-SEN by CyberArk Actual Free Exam Questions And Answers

Question 1

What are the chief benefits of PSM? Choose all that apply

A. A & C

B. Privileged Session Recording

C. Privileged Session Isolation

D. Automatic Password Management

Discussion 0

Correct Answer: A Vote an answer

Question 2

For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure access a password without approval

A. On the safe in which the account is stored grant the group the 'Access safe without confirmation' authorization

B. Edit the master policy rule and modify the advanced 'Access safe without approval' rule to include the group.

C. Create an exception to the Master Policy to exclude the group from the workflow process.

D. On the safe in which the account is stored grant the group the 'Access safe without audit' authorization.

Discussion 0

Correct Answer: A Vote an answer

Question 3

Time of day of week restrictions on when password changes can occur are configured in ________________.

A. The Safe settings

B. The Platform settings

C. The Master Policy

D. The Account Details

Discussion 0

Correct Answer: B Vote an answer

Question 4

What is the purpose of the Allowed Safes parameter in a CPM policy? Select all that apply.

A. To prevent accidental use of a policy in the wrong safe.

B. To allow users to access only the passwords they should be able to access.

C. To improve performance by reducing CPU workload.

D. To enforce Least Privilege in CyberArk.

Discussion 0

Correct Answer: B,D Vote an answer

Question 5

An auditor initiates a LIVE monitoring session to PSM server to view an ongoing LIVE session.
When the auditor's machine makes an RDP connection the PSM server, which user will be used?

A. PSMConnect

B. Credentials Stored in the Vault for the Target Machine

C. PSMAdminConnect

D. Shadowuser

Discussion 0

Correct Answer: C Vote an answer

Question 6

A Reconcile Account can be specified in the Master Policy.

A. FALSE

B. TRUE

Discussion 0

Correct Answer: A Vote an answer

Question 7

A Simple Network Management Protocol (SNMP) integration allows the Vault administrator to forward ITALOG records to a monitoring solution.

A. False

B. True

Discussion 0

Correct Answer: A Vote an answer

Question 8

After the Vault administrator configures syslog integration on the Vault, the Vault will be able to.

A. forward emails to SIEM.

B. forward audit records to Security Information and Event Management (SIEM).

C. forward ITALOG records to Security Information and Event Management (SIEM).

D. send out Simple Network Management Protocol (SNMP) traps.

Discussion 0

Correct Answer: B Vote an answer

Question 9

Is it possible to modify the CyberArk Vault Audit Log?

A. Yes, a Vault administrator can modify the Audit log

B. Yes, a Vault administrator can edit the Audit log but only with explicit permission from CyberArk

C. Yes, but only the Master user can modify the Audit log

D. No, the audit trail is tamper proof and cannot be edited, not even by Master

Discussion 0

Correct Answer: D Vote an answer

Question 10

Which file is used to open up a non-standard Firewall port to the Vault?

A. PARagent.ini

B. dbparm.ini

C. passparm.ini

D. Vault.ini

Discussion 0

Correct Answer: D Vote an answer

Question 11

The Password upload utility can be used to create safes.

A. FALSE

B. TRUE

Discussion 0

Correct Answer: B Vote an answer

CyberArk Defender - PAM & Sentry - PAM - PAM-DEF-SEN Exam Practice Test

Contact Us

Useful Links

Latest Updated