[Sep 14, 2022] PAM-DEF-SEN Exam Brain Dumps - Study Notes and Theory [Q138-Q152] : Top Exam Collection : http://blog.topexamcollection.com

Q138. The Vault Internal safe contains all of the configuration for the vault.

真

假

Q139. Which of the following statements are NOT true when enabling PSM recording for a target Windows server? Choose all that apply

The PSM software must be installed on the target server

PSM must be enabled in the Master Policy {either directly, or through exception).

PSMConnect must be added as a local user on the target server

RDP must be enabled on the target server

Q140. 在保险库中，每个密码都用唯一的加密密钥加密。

真

假

Q141. CyberArk Secure Propetary Protocol 使用哪个 IP 端口和协议？

TCP/1858

TCP/636

UDP/1812

TCP/22

Q142. Which user(s) can access all passwords in the vault

管理员

Any member of Vault Admins

Any member of Auditors

Master

Q143. All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe The members of the AD group UnixAdmms need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of OperationsManagers The members of OperationsManagers never need to be able to use the show, copy or connect buttons themselves.
Which safe permissions do you need to grant to UnixAdmins? Check all that apply

Use Accounts

Retrieve Accounts

List Accounts

Authorize Password Requests

Access Safe without Authorization

Q144. Select the best practice for storing the Master CD.

Copy the files to the Vault server and discard the CD.

Copy the contents of the CD to a Hardware Security Module and discard the CD.

Store the CD in a secure location, such as a physical safe.

Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions) on the vault.

Q145. Users complain they are unsuccessful attempting to authenticate to the PVWA web site. After entering their credentials, they receive a “Timeout has expired”. You test the URL using multiple browsers and receive the same error. The CyberArk.WebApplication.log shows the “ITACM012S Timeout has expired” log entry.
What is the next troubleshooting step you should take?

Run an IISRESET on the PVWA server

Check the CyberArk.WebConsole.log for errors

Check network firewall rules to ensure the PVWA can communicate to the Vault over tcp_1858

Check the health of the Vault Server and ensure all services are running

Q146. You have associated a logon account to one of your UNIX root accounts in the vault When attempting to verify the root account’s password the CPM will…

Ignore the logon account and attempt to log in as root.

Prompt the end user with a dialog box asking for the login account to use.

None of these.

Q147. What is the purpose of the password Reconcile process?

To test that CyberArk is storing accurate credentials for accounts.

To change the password of an account according to organizationally defined password rules.

To allow CyberArk to manage unknown or lost credentials.

To generate a new complex password.

Q148. Which one of the following reports is NOT generated by using the Password Vault Web Access (PVWA)?

Accounts Inventory

Application Inventory

Active/Non-Active Users

Compliance Status

Q149. What is the purpose of the Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work

To control how often the CPM looks for User Initiated CPM work.

To control how long the CPM rests between password changes

To control the maximum amount of time the CPM will wait for a password change to complete

Q150. Which credentials does CyberArk use when managing a target account?

Those of the service account for the CyberArk Password Manager service

A Domain Administrator account created for this purpose

The credentials of the target account

An account assigned by the Master Policy

Q151. CyberArk creates exceptions for Data Execution Prevention (DEP) on selected executable files.
This is done as part of installing which of the following components?

PSM

CPM

PVWA

AAM Credential Provider (previously known as AIM Credential Provider)

Q152. Which one of the built-in Vault users is not automatically added to the safe when it is first created in PVWA?

Master

管理员

Auditor

操作员