Free CyberArk Defender – PAM Exam PAM-DEF Exam Practice Test

Which combination of Safe member permissions will allow end users to log in to a remote machine transparently but NOT show or copy the password?

• Use Accounts, Retrieve Accounts, List Accounts
• Use Accounts, List Accounts
• Use Accounts
• List Accounts, Retrieve Accounts

Which CyberArk group does a user need to be part of to view recordings or live monitor sessions?

• Auditors
• Vault Admin
• DR Users
• Operators

A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication. Which locations must you update?

• on the Vault server in Windows\System32\Etc\Hosts and in the PVWA Application under Administration > LDAP Integration > Directories > Hosts
• on the Vault server in Windows\System32\Etc\Hosts and on the PVWA server in Windows\System32\Etc\Hosts
• in the Private Ark client under Tools > Administrative Tools > Directory Mapping
• on the Vault server in the certificate store and on the PVWA server in the certificate store

Which values are acceptable in the address field of an Account?

• It must be a Fully Qualified Domain Name (FQDN)
• It must be an IP address
• It must be NetBIOS name
• Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable

Which keys are required to be present in order to start the PrivateArk Server service?

• Recovery public key
• Recovery private key
• Server key
• Safe key

Which permissions are needed for the Active Directory user required by the Windows Discovery process?

• Domain Admin
• LDAP Admin
• Read/Write
• Read

A new HTML5 Gateway has been deployed in your organization. Where do you configure the PSM to use the HTML5 Gateway?

• Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway
• Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers
• Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway
• Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details

A user with administrative privileges to the vault can only grant other users privileges that he himself has.

• TRUE
• FALSE

The vault supports Role Based Access Control.

• TRUE
• FALSE

You want to generate a license capacity report. Which tool accomplishes this?

• Password Vault Web Access
• PrivateArk Client
• DiagnoseDB Report
• RestAPI