CyberArk PAM-DEF 시험

Question No : 1

Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp.
When the client’s machine makes an RDP connection to the PSM server, which user will be utilized?

• A.Credentials stored in the Vault for the target machine
• B.Shadowuser
• C.PSMConnect
• D.PSMAdminConnect

답을 확인하기

정답:

Question No : 2

To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?

• A.List Accounts, Use Accounts
• B.List Accounts, Use Accounts, Retrieve Accounts
• C.Use Accounts
• D.List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation

답을 확인하기

정답:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PSSO-PSMConnecPVWA.htm?TocPath=End%20User%7CConnect%20to%20Accounts%7CPrivileged%20Single%20Sign-On%7C_____2

Question No : 3

In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system .
What is the BEST way to allow CPM to manage root accounts?

• A.Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server’s root account.
• B.Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server’s root account.
• C.Configure the Unix system to allow SSH logins.
• D.Configure the CPM to allow SSH logins.

답을 확인하기

정답:

Question No : 4

You are logging into CyberArk as the Master user to recover an orphaned safe.
Which items are required to log in as Master?

• A.Master CD, Master Password, console access to the Vault server, Private Ark Client
• B.Operator CD, Master Password, console access to the PVWA server, PVWA access
• C.Operator CD, Master Password, console access to the Vault server, Recover.exe
• D.Master CD, Master Password, console access to the PVWA server, Recover.exe

답을 확인하기

정답:
Explanation:
Reference: https://cyberark-customers.force.com/s/article/How-to-log-in-as-the-Master-user

Question No : 5

DRAG DROP
Arrange the steps to restore a Vault using PARestore for a Backup in the correct sequence.

답을 확인하기

정답:

Question No : 6

A user is receiving the error message “ITATS006E Station is suspended for User jsmith” when attempting to sign into the Password Vault Web Access (PVWA) .
Which utility would a Vault administrator use to correct this problem?

• A.createcredfile.exe
• B.cavaultmanager.exe
• C.PrivateArk
• D.PVWA

답을 확인하기

정답:

Question No : 7

Which option in the Private Ark client is used to update users’ Vault group memberships?

• A.Update > General tab
• B.Update > Authorizations tab
• C.Update > Member Of tab
• D.Update > Group tab

답을 확인하기

정답:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm?TocPath=Administration%7CUser%20Management%7C_____7

Question No : 8

A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

• A.True
• B.False

답을 확인하기

정답:

Question No : 9

The password upload utility must run from the CPM server

• A.TRUE
• B.FALSE

답을 확인하기

정답:

Question No : 10

What is the purpose of the PrivateArk Database service?

• A.Communicates with components
• B.Sends email alerts from the Vault
• C.Executes password changes
• D.Maintains Vault metadata

답을 확인하기

정답:

Question No : 11

tsparm.ini is the main configuration file for the Vault.

• A.True
• B.False

답을 확인하기

정답:

Question No : 12

VAULT authorizations may be granted to_____.

• A.Vault Users
• B.Vault Groups
• C.LDAP Users
• D.LDAP Groups

답을 확인하기

정답:

Question No : 13

Within the Vault each password is encrypted by:

• A.the server key
• B.the recovery public key
• C.the recovery private key
• D.its own unique key

답을 확인하기

정답:

Question No : 14

CyberArk recommends implementing object level access control on all Safes.

• A.True
• B.False

답을 확인하기

정답:

Question No : 15

Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that apply.

• A.PAR Agent
• B.PrivateArk Server Central Administration
• C.Edit DBParm.ini in a text editor.
• D.Setup.exe

답을 확인하기

정답:
Explanation:
PAR-Private Ark Remote Control Agent allows you to perform several Vault admin tasks (without restarting the Vault) and view machine statistics.