PAM-DEF Dumps with Practice Exam Questions Answers [Q65-Q79]

Q65. In a rule using “Privileged Session Analysis and Response” in PTA, which session options are available to configure as responses to activities?

Suspend, Terminate, None

Suspend, Terminate, Lock Account

Pause, Terminate, None

Suspend, Terminate

Q66. A Logon Account can be specified in the Master Policy.

TRUE

FALSE

Q67. Secure Connect provides the following. Choose all that apply.

PSM connections to target devices that are not managed by CyberArk.

Session Recording

Real-time live session monitoring.

PSM connections from a terminal without the need to login to the PVWA

Q68. One can create exceptions to the Master Policy based on ____________________.

Safes

Platforms

Policies

Accounts

Q69. Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)

Store the CD in a physical safe and mount the CD every time Vault maintenance is performed

Copy the entire contents of the CD to the system Safe on the Vault

Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions

Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions

Q70. When managing SSH keys, the CPM stored the Private Key

In the Vault

On the target server

A & B

Nowhere because the private key can always be generated from the public key.

Q71. Your customer, ACME Corp, wants to store the Safes Data in Drive D instead of Drive C.
Which file should you edit?

TSparm.ini

Vault.ini

DBparm.ini

user.ini

Q72. Time of day or day of week restrictions on when password verifications can occur configured in ____________________.

The Master Policy

The Platform settings

The Safe settings

The Account Details

Q73. In a default CyberArk installation, which group must a user be a member of to view the “reports” page in PVWA?

PVWAMonitor

ReportUsers

PVWAReports

Operators

Q74. Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

PSM (i.e., launching connections by clicking on the “Connect” button in the PVWA)

PSM for Windows (previously known as RDP Proxy)

PSM for SSH (previously known as PSM SSH Proxy)

All of the above

Q75. The vault supports Role Based Access Control.

TRUE

FALSE

Q76. What is the purpose of the password change process?

To test that CyberArk is storing accurate credentials for accounts

To change the password of an account according to organizationally defined password rules

To allow CyberArk to manage unknown or lost credentials

To generate a new complex password

Q77. Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

Suspected credential theft

Over-Pass-The-Hash

Golden Ticket

Unmanaged privileged access

Q78. What is the purpose of the HeadStartlnterval setting m a platform?

It determines how far in advance audit data is collected tor reports

It instructs the CPM to initiate the password change process X number of days before expiration.

It instructs the AIM Provider to ‘skip the cache’ during the defined time period

It alerts users of upcoming password changes x number of days before expiration.

Q79. Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.

TRUE

FALSE

PAM-DEF Dumps with Practice Exam Questions Answers [Q65-Q79]

Leave a Reply Cancel reply

PAM-DEF Practice Tests

Related Certifications

Recent Posts

Categories

Archives