CyberArk Defender - PAM PAM-DEF Exam Updated Questions - Free Latest Dumps for IT Certification Exams

CyberArk Defender – PAM PAM-DEF Exam Updated Questions

dumps2023-09-05T10:18:06+08:00

CyberArk Defender – PAM PAM-DEF exam updated questions are available, which are valuable for you to take PAM-DEF test. The former code of PAM-DEF exam is CAU201. If you are intending to earn CyberArk Defender certification, you can choose to take PAM-DEF test. With using CyberArk Defender – PAM PAM-DEF exam updated questions, you can pass the test easily. Free updated CyberArk Defender – PAM PAM-DEF exam questions are below.

Page 1 of 3

1. What do you need on the Vault to support LDAP over SSL?

CA Certificate(s) used to sign the External Directory certificate

RECPR

key

a private key for the external directory

self-signed Certificate(s) for the Vault

2. You are troubleshooting a PVWA slow response.

Which log files should you analyze first? (Choose two.)

ITALog.log

web.config

CyberArk.WebApplication.log

CyberArk.WebConsole.log

3. What is the easiest way to duplicate an existing platform?

From Private Ark, copy/paste the appropriate Policy.ini file; then rename it.

From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.

From Private Ark, copy/paste the appropriate settings in PVConfiguration.xml; then update the policy Name variable.

From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click "Save as" INSTEAD of save to duplicate and rename the platform.

4. DRAG DROP

Match each key to its recommended storage location.

5. Due to corporate storage constraints, you have been asked to disable session monitoring and recording for 500 testing accounts used for your lab environment.

How do you accomplish this?

Master Policy>select Session Management>add Exceptions to the platform(s)>disable Session Monitoring and Recording policies

Administration>Platform Management>select the platform(s)>disable Session Monitoring and Recording

Polices>Access Control (Safes)>select the safe(s)>disable Session Monitoring and Recording policies

Administration>Configuration Options>Options>select Privilege Session Management>disable Session Monitoring and Recording policies

6. A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request.

What is the correct location to identify users or groups who can approve?

PVWA > Administration > Platform Configuration > Edit Platform > UI & Workflow > Dual Control > Approvers

PVWA > Policies > Access Control (Safes) > Select the safe > Safe Members > Workflow > Authorize Password Requests

PVWA > Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers

Private Ark > Admin Tools > Users and Groups > Auditors (Group Membership)

7. What must you specify when configuring a discovery scan for UNIX? (Choose two.)

Vault Administrator

CPM Scanner

root password for each machine

list of machines to scan

safe for discovered accounts

8. To change the safe where recordings are kept for a specific platform, which setting must you update in the platform configuration?

SessionRecorderSafe

SessionSafe

RecordingsPath

RecordingLocation

9. Which processes reduce the risk of credential theft? (Choose two.)

require dual control password access approval

require password change every X days

enforce check-in/check-out exclusive access

enforce one-time password access

10. You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.

How can this be configured to allow for password management using least privilege?

Configure each CPM to use the correct logon account.

Configure each CPM to use the correct reconcile account.

Configure the UNIX platform to use the correct logon account.

Configure the UNIX platform to use the correct reconcile account.

Page 2 of 3

11. DRAG DROP

ADR Vault became active due to a failure of the primary Vault. Service on the primary Vault has now been restored. Arrange the steps to return the DR vault to its normal standby mode in the correct sequence.

12. Which methods can you use to add a user directly to the Vault Admin Group? (Choose three.)

REST API

PrivateArk Client

PACLI

PVWA

Active Directory

Sailpoint

13. Which Automatic Remediation is configurable for a PTA detection of a "Suspected Credential Theft"?

Add to Pending

Rotate Credentials

Reconcile Credentials

Disable Account

14. Which item is an option for PSM recording customization?

Windows events text recorder with automatic play-back

Windows events text recorder and universal keystrokes recording simultaneously

Universal keystrokes text recorder with windows events text recorder disabled

Custom audio recording for windows events

15. DRAG DROP

Match the built-in Vault user with the correct definition.

16. You want to create a new onboarding rule.

Where do you accomplish this?

In PVWA, click Reports > Unmanaged Accounts > Rules

In PVWA, click Options > Platform Management > Onboarding Rules

In PrivateArk, click Tools > Onboarding Rules

In PVWA, click Accounts > Onboarding Rules

17. What does the Export Vault Data (EVD) utility do?

exports data from the Vault to TXT or CSV files, or to MSSQL databases

generates a backup file that can be used as a cold backup

exports all passwords and imports them into another instance of CyberArk

keeps two active vaults in sync

18. When are external vault users and groups synchronized by default?

They are synchronized once every 24 hours between 1 AM and 5 A

They are synchronized once every 24 hours between 7 PM and 12 A

They are synchronized every 2 hours.

They are not synchronized according to a specific schedule.

19. You created a new safe and need to ensure the user group cannot see the password, but can connect through the PSM.

Which safe permissions must you grant to the group? (Choose two.)

List Accounts

Use Accounts

Access Safe without Confirmation

Retrieve Files

Confirm Request

20. During a High Availability node switch you notice an error and the Cluster Vault Manager Utility fails back to the original node.

Which log files should you check to investigate the cause of the issue? (Choose three.)

CyberArk Webconsole.log

VaultD

log

PM_Error.log

ITALog.log

ClusterVault.console.log

logiccontainer.log

Page 3 of 3

21. Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile Utility? (Choose three.)

OS Username

Current machine IP

Current machine hostname

Operating System Type (Linux/Windows/HP-UX)

Vault IP Address

Time Frame

22. Where can a user with the appropriate permissions generate a report? (Choose two.)

PVWA > Reports

PrivateArk Client

Cluster Vault Manager

PrivateArk Server Monitor

PARClient

23. Users are unable to launch Web Type Connection components from the PSM server. Your manager asked you to open the case with CyberArk Support.

Which logs will be most useful for the CyberArk Support Team to debug the issue? (Choose three.)

PSMConsole.log

PSMDebug.log

PSMTrace.log

<Session_ID>.Component.log

PMconsole.log

ITALog.log

24. You have been asked to identify the up or down status of Vault Services.

Which CyberArk utility can you use to accomplish this task?

PrivateArk Central Administration Console

PAS Reporter

PrivateArk Remote Control Agent

Syslog

25. A new colleague created a directory mapping between the Active Directory groups and the Vault.

Where can the newly Configured directory mapping be tested?

Connect to the Active Directory and ensure the organizational unit exists.

Connect to Sailpoint (or similar tool) to ensure the organizational unit is correctly named; log in to the PVWA with "Administrator" and confirm authentication succeeds.

Search for members that exist only in the mapping group to grant them safe permissions through the PVW

Connect to the PrivateArk Client with the Administrator Account to see if there is a user in the Vault Admin Group.

26. A user needs to view recorded sessions through the PVWA.

Without giving auditor access, which safes does a user need access to view PSM recordings? (Choose two.)

Recordings safe

Safe the account is in

System safe

PVWA Configuration safe

Vault Internal safe

27. Which file must be edited on the Vault to configure it to send data to PTA?

dbparm.ini

PARAgent.ini

my.ini

padr.ini

28. You want to build a connector that connects to a website through the Web applications for PSM framework.

Which default connector do you duplicate and modify?

PSM-ChromeSample

PSM-WebForm

PSM-WebApp

PSM-WebAppSample

29. DRAG DROP

A new HTML5 Gateway has been deployed in your organization.

From the PVWA, arrange the steps to configure a PSM host to use the HTML5 Gateway in the correct sequence.

30. When an account is unable to change its own password, how can you ensure that password reset with the reconcile account is performed each time instead of a change?

Set the parameter RCAllowManualReconciliation to Yes.

Set the parameter ChangePasswordinResetMade to Yes.

Set the parameter IgnoreReconcileOnMissingAccount to No.

Set the UnlockUserOnReconcile to Yes.

CyberArk Defender – PAM PAM-DEF Exam Updated Questions

CyberArk Defender – PAM PAM-DEF Exam Updated Questions

Share this post

Leave a Reply Cancel reply

Related Posts