Aug-2022 Free CyberArk PAM-DEF Exam Question Practice Exams
Ace PAM-DEF Certification with 180 Actual Questions
NEW QUESTION 20
PSM captures a record of each command that was executed in Unix.
- A. FALSE
- B. TRIE
Answer: B
NEW QUESTION 21
A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication.
Which locations must you update?
- A. on the Vault server in the certificate store and on the PVWA server in the certificate store
- B. on the Vault server in Windows\System32\Etc\Hosts and on the PVWA server in Windows\System32\Etc\Hosts
- C. on the Vault server in Windows\System32\Etc\Hosts and in the PVWA Application under Administration > LDAP Integration > Directories > Hosts
- D. in the Private Ark client under Tools > Administrative Tools > Directory Mapping
Answer: D
NEW QUESTION 22
When managing SSH keys, the CPM stored the Private Key
- A. In the Vault
- B. Nowhere because the private key can always be generated from the public key.
- C. A & B
- D. On the target server
Answer: A
NEW QUESTION 23
PSM for Windows (previously known as "RDP Proxy") supports connections to the following target systems
- A. Windows
- B. UNIX
- C. Oracle
- D. All of the above
Answer: A
NEW QUESTION 24
A user is receiving the error message "ITATS006E Station is suspended for User jsmith" when attempting to sign into the Password Vault Web Access (PVWA) .
Which utility would a Vault administrator use to correct this problem?
- A. createcredfile.exe
- B. cavaultmanager.exe
- C. PrivateArk
- D. PVWA
Answer: C
NEW QUESTION 25
Which of the following components can be used to create a tape backup of the Vault?
- A. High Availability
- B. Replicate
- C. Disaster Recovery
- D. Distributed Vaults
Answer: B
NEW QUESTION 26
An auditor initiates a live monitoring session to PSM server to view an ongoing live session.
When the auditor's machine makes an RDP connection the PSM server, which user will be used?
- A. Credentials stored in the Vault for the target machine
- B. PSMConnect
- C. Shadowuser
- D. PSMAdminConnect
Answer: D
NEW QUESTION 27
Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 28
Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?
- A. Yes, when using the connect button, CyberArk uses the PMTerminal.exe process which bypasses the root SSH restriction.
- B. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.
- C. No, it is not possible.
- D. Yes, if a logon account is associated with the root account.
Answer: B
NEW QUESTION 29
If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attached to the account?
- A. KeyPath
- B. KeyFile
- C. ObjectName
- D. Address
Answer: B
NEW QUESTION 30
Which user(s) can access all passwords in the Vault?
- A. Any member of Vault administrators
- B. Administrator
- C. Master
- D. Any member of auditors
Answer: C
NEW QUESTION 31
As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 32
You want to generate a license capacity report.
Which tool accomplishes this?
- A. PrivateArk Client
- B. Password Vault Web Access
- C. DiagnoseDB Report
- D. RestAPI
Answer: A
NEW QUESTION 33
The vault supports Role Based Access Control.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 34
What is the purpose of the password change process?
- A. To change the password of an account according to organizationally defined password rules
- B. To test that CyberArk is storing accurate credentials for accounts
- C. To generate a new complex password
- D. To allow CyberArk to manage unknown or lost credentials
Answer: D
NEW QUESTION 35
Which usage can be added as a service account platform?
- A. Loosely Connected Devices
- B. PowerShell Libraries
- C. IIS Application Pools
- D. Kerberos Tokens
Answer: A
NEW QUESTION 36
SAFE Authorizations may be granted to____________.
Select all that apply.
- A. Vault Users
- B. LDAP Groups
- C. LDAP Users
- D. Vault Group
Answer: A,B,C,D
NEW QUESTION 37
......
PAM-DEF Questions PDF [2022] Use Valid New dump to Clear Exam: https://www.validbraindumps.com/PAM-DEF-exam-prep.html
PASS CyberArk PAM-DEF EXAM WITH UPDATED DUMPS: https://drive.google.com/open?id=1t2w7XHr7ubMkukegDxWyKWjMNn0kBzu_