Q91. When on-boarding account using Accounts Feed, which of the following is true?

Q92. Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

Q93. The System safe allows access to the Vault configuration files.

Q94. It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

Q95. You have been asked to identify the up or down status of Vault services.
Which CyberArk utility can you use to accomplish this task?

Q96. It a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

Q97. It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

Q98. You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.
How should this be configured to allow for password management using least privilege?

Q99. Ifa password is changed manually on a server, bypassing the CPM, how would you configure theaccount so that the CPM could resume management automatically?

Q100. What is the purpose of the Immediate Interval setting in a CPM policy?

Q101. Which of the following statements are NOT true when enabling PSM recording for a target Windows server?
Choose all that apply.

Q102. What is the purpose of the HeadStartlnterval setting m a platform?

Q103. CyberArk recommends implementing object level access control on all Safes.

Q104. In order to connect to a target device through PSM, the account credentials used for the connection must be
stored in the vault?

Q105. You want to generate a license capacity report.
Which tool accomplishes this?

Q106. You are onboarding an account that is not supported out of the box.
What should you do first to obtain a platform to import?

Q107. A newly created platform allows users to access a Linux endpoint. When users click to connect, nothing happens.
Which piece of the platform is missing?

Q108. When managing SSH keys, the CPM stored the Private Key

Q109. PSM for Windows (previously known as “RDP Proxy”) supports connections to the following target systems

Q110. All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the
accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and
connect buttons on those passwords at any time without confirmation. The members of the AD group
OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an
emergency basis, but only with the approval of a member of OperationsManagers. The members of
OperationsManagers never need to be able to use the show, copy or connect buttons themselves.
Which safe permissions do you need to grant to OperationsStaff? Check all that apply.

Q111. It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur

Q112. An auditor initiates a live monitoring session to PSM server to view an ongoing live session. When the auditor’s machine makes an RDP connection the PSM server, which user will be used?

Q113. Which CyberArk components products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.