PAM-DEF Online Practice Questions and Answers
A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings. What is the issue?
A. The user must login as PSMAdminConnect
B. The PSM service is not running
C. The user is not a member of the PVWAMonitor group
D. The user is not a member of the Auditors group
Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?
A. Require dual control password access Approval
B. Enforce check-in/check-out exclusive access
C. Enforce one-time password access
D. Enforce check-in/check-out exclusive access and Enforce one-time password access
When managing SSH keys, the CPM stores the Public Key
A. In the Vault
B. On the target server
C. A and B
D. Nowhere because the public key can always be generated from the private key.
In the Private Ark client under the Tools menu > Administrative Tools > Users and Groups, which option do you use to update users' Vault group memberships?
A. Update > General tab
B. Update > Authorizations tab
C. Update > Member Of tab
D. Update > Group tab
By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?
A. Vault Admins
B. Security Admins
C. Security Operators
D. Auditors
Where can you assign a Reconcile account? (Choose two.)
A. in PVWA at the account level
B. in PVWA in the platform configuration
C. in the Master policy of the PVWA
D. at the Safe level
E. in the CPM settings
How do you create a cold storage backup?
A. On the DR Vault, install PAReplicate according to the Installation guide, configure the logon ini file, and define the Schedule tasks for full and incremental backups.
B. Install the Vault Backup utility on a different machine from the Enterprise Password Vault server and trigger the full backup.
C. Configure the backup options in the PVWA.
D. On the DR Vault, configure the cold storage backup path in TSParm.ini file.
You have been asked to create an account group and assign three accounts which belong to a cluster. When you try to create a new group, you receive an unauthorized error; however, you are able to edit other aspects of the account
properties.
Which safe permission do you need to manage account groups?
A. create folders
B. specify next account content
C. rename accounts
D. manage safe
During a High Availability node switch you notice an error and the Cluster Vault Manager Utility fails back to the original node. Which log files should you check to investigate the cause of the issue? (Choose three.)
A. CyberArk Webconsole.log
B. VaultDB.log
C. PM_Error.log
D. ITALog.log
E. ClusterVault.console.log
F. logiccontainer.log