100% Reliable PAM-DEF Exam Dumps Test Pdf Exam Material [Q10-Q27]

Q10. It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

TRUE

FALS

Q11. If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

Configure the Provider to change the password to match the Vault’s Password

Associate a reconcile account and configure the platform to reconcile automatically

Associate a logon account and configure the platform to reconcile automatically

Run the correct auto detection process to rediscover the password

Q12. In the Private Ark client, how do you add an LDAP group to a CyberArk group?

Select Update on the CyberArk group, and then click Add > LDAP Group

Select Update on the LDAP Group, and then click Add > LDAP Group

Select Member Of on the CyberArk group, and then click Add > LDAP Group

Select Member Of on the LDAP group, and then click Add > LDAP Group

Q13. You have been asked to turn off the time access restrictions for a safe.
Where is this setting found?

PrivateArk

RestAPI

Password Vault Web Access (PVWA)

Vault

Q14. Which user is automatically added to all Safes and cannot be removed?

Auditor

Administrator

Master

Operator

Q15. Platform settings are applied to _________.

The entire vault.

Network Areas

Safes

Individual Accounts

Q16. user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings.
What is the issue?

The user must login as PSMAdminConnect

The PSM service is not running

The user is not a member of the PVWAMonitor group

The user is not a member of the Auditors group

Q17. Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

TRUE

FALSE

Q18. Which certificate type do you need to configure the vault for LDAP over SSL?

the CA Certificate that signed the certificate used by the External Directory

a CA signed Certificate for the Vault server

a CA signed Certificate for the PVWA server

a self-signed Certificate for the Vault

Q19. You receive this error: “Error in changepass to user domainuser on domain server(domain. (winRc=5) Access is denied.”
Which root cause should you investigate?

The account does not have sufficient permissions to change its own password.

The domain controller is unreachable.

The password has been changed recently and minimum password age is preventing the change.

The CPM service is disabled and will need to be restarted.

Q20. When a DR Vault Server becomes an active vault, it will automatically fail back to the original state once the Primary Vault comes back online.

True; this is the default behavior

False; this is not possible

True, if the AllowFailback setting is set to “yes” in the padr.ini file

True, if the AllowFailback setting is set to “yes” in the dbparm.ini file

Q21. You are creating a Dual Control workflow for a team’s safe.
Which safe permissions must you grant to the Approvers group?

List accounts, Authorize account request

Retrieve accounts, Access Safe without confirmation

Retrieve accounts, Authorize account request

List accounts, Unlock accounts

Q22. The System safe allows access to the Vault configuration files.

TRUE

FALS

Q23. CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

TRUE

FALSE

Q24. A newly created platform allows users to access a Linux endpoint. When users click to connect, nothing happens.
Which piece of the platform is missing?

PSM-SSH Connection Component

UnixPrompts.ini

UnixProcess.ini

PSM-RDP Connection Component

Q25. Which of the Following can be configured in the Master Poky? Choose all that apply.

Dual Control

One Time Passwords

Exclusive Passwords

Password Reconciliation

Ticketing Integration

Required Properties

Custom Connection Components