PAM-DEF Study Guide Latest [May 12, 2023] Realistic Verified PAM-DEF Dumps [Q44-Q63] : Latest Exam Prep : http://certify.vceprep.com

NEW QUESTION 44
If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attached to the account?

KeyPath

KeyFile

ObjectName

Address

NEW QUESTION 45
You want to generate a license capacity report.
Which tool accomplishes this?

Password Vault Web Access

PrivateArk Client

DiagnoseDB Report

RestAPI

NEW QUESTION 46
Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp. When the client’s machine makes an RDP connection to the PSM server, which user will be utilized?

Credentials stored in the Vault for the target machine

Shadowuser

PSMConnect

PSMAdminConnect

NEW QUESTION 47
You are creating a Dual Control workflow for a team’s safe.
Which safe permissions must you grant to the Approvers group?

List accounts, Authorize account request

Retrieve accounts, Access Safe without confirmation

Retrieve accounts, Authorize account request

List accounts, Unlock accounts

NEW QUESTION 48
In the screenshot displayed, you just configured the usage in CyberArk and want to update its password.

What is the least intrusive way to accomplish this?

Use the “change” button on the usage’s details page.

Use the “change” button on the parent account’s details page.

Use the “sync” button on the usage’s details page.

Use the “reconcile” button on the parent account’s details page.

NEW QUESTION 49
One can create exceptions to the Master Policy based on ____________________.

Safes

Platforms

Policies

Accounts

NEW QUESTION 50
Which of the following logs contains information about errors related to PTA?

ITAlog.log

diamond.log

pm_error.log

WebApplication.log

NEW QUESTION 51
An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?

PSMConnect

PSMMaster

PSMGwUser

PSMAdminConnect

NEW QUESTION 52
What is the name of the Platform parameters that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

Min Validity Period

Interval

Immediate Interval

Timeout

NEW QUESTION 53
Within the Vault each password is encrypted by:

the server key

the recovery public key

the recovery private key

its own unique key

NEW QUESTION 54
What is the purpose of the HeadStartlnterval setting m a platform?

It determines how far in advance audit data is collected tor reports

It instructs the CPM to initiate the password change process X number of days before expiration.

It instructs the AIM Provider to ‘skip the cache’ during the defined time period

It alerts users of upcoming password changes x number of days before expiration.

NEW QUESTION 55
To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?

List Accounts, Use Accounts

List Accounts, Use Accounts, Retrieve Accounts

Use Accounts

List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation

NEW QUESTION 56
A Logon Account can be specified in the Master Policy.

TRUE

FALSE

NEW QUESTION 57
The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.
How are these keys managed?

CyberArk stores Private keys in the Vault and updates Public keys on target systems.

CyberArk stores Public keys in the Vault and updates Private keys on target systems.

CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.

CyberArk stores both Private and Public keys and can update target systems with either key.

NEW QUESTION 58
In a default CyberArk installation, which group must a user be a member of to view the “reports” page in PVWA?

PVWAMonitor

ReportUsers

PVWAReports

Operators

NEW QUESTION 59
Which Automatic Remediation is configurable for a PTA detection of a “Suspected Credential Theft”?

Add to Pending

Rotate Credentials

Reconcile Credentials

Disable Account

NEW QUESTION 60
Which usage can be added as a service account platform?

Kerberos Tokens

IIS Application Pools

PowerShell Libraries

Loosely Connected Devices

NEW QUESTION 61
What is the purpose of the CyberArk Event Notification Engine service?

It sends email messages from the Central Policy Manager (CPM)

It sends email messages from the Vault

It processes audit report messages

It makes Vault data available to components

NEW QUESTION 62
Accounts Discovery allows secure connections to domain controllers.

TRUE

FALSE

NEW QUESTION 63
In the Private Ark client, how do you add an LDAP group to a CyberArk group?

Select Update on the CyberArk group, and then click Add > LDAP Group

Select Update on the LDAP Group, and then click Add > LDAP Group

Select Member Of on the CyberArk group, and then click Add > LDAP Group

Select Member Of on the LDAP group, and then click Add > LDAP Group