Prepare PAM-DEF Question Answers - PAM-DEF Exam Dumps [Q62-Q81] : Free Exams Dumps Materials : http://exams.dumpsmaterials.com

第 62 号 In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.

Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server’s root account.

Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server’s root account.

Configure the Unix system to allow SSH logins.

Configure the CPM to allow SSH logins.

NO.63 You need to enable the PSM for all platforms.
Where do you perform this task?

Platform Management > (Platform) > UI & Workflows

Master Policy > Session Management

Master Policy > Privileged Access Workflows

Administration > Options > Connection Components

NO.64 Where can a user with the appropriate permissions generate a report? (Choose two.)

PVWA > Reports

PrivateArk 客户端

Cluster Vault Manager

PrivateArk Server Monitor

PARClient

第 65 号 The Vault administrator can change the Vault license by uploading the new license to the system Safe.

正确

假的

NO.66 What is the purpose of the Immediate Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how often the CPM rests between password changes.

To Control the maximum amount of time the CPM will wait for a password change to complete.

NO.67 Which one the following reports is NOT generated by using the PVWA?

Accounts Inventory

Application Inventory

Sales List

Convince Status

NO.68 You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.
How should this be configured to allow for password management using least privilege?

Configure each CPM to use the correct logon account.

Configure each CPM to use the correct reconcile account.

Configure the UNIX platform to use the correct logon account.

Configure the UNIX platform to use the correct reconcile account.

第 69 号 Customers who have the ‘Access Safe without confirmation’ safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

真

假

NO.70 When should vault keys be rotated?

when it is copied to file systems outside the vault

annually

whenever a CyberArk user leaves the organization

when migrating to a new data center

第 71 号 A user needs to view recorded sessions through the PVWA.
Without giving auditor access, which safes does a user need access to view PSM recordings? (Choose two.)

Recordings safe

Safe the account is in

System safe

PVWAConfiguration safe

VaultInternal safe

第 72 号 Match each PTA alert category with the PTA sensors that collect the data for it.

第 73 号 You need to enable the PSM for all platforms.
Where do you perform this task?

Platform Management > (Platform) > UI & Workflows

Master Policy > Session Management

Master Policy > Privileged Access Workflows

Administration > Options > Connection Components

第 74 号 One can create exceptions to the Master Policy based on ____________________.

Safes

Platforms

政策

账户

第 75 号 You are creating a Dual Control workflow for a team’s safe.
Which safe permissions must you grant to the Approvers group?

List accounts, Authorize account request

Retrieve accounts, Access Safe without confirmation

Retrieve accounts, Authorize account request

List accounts, Unlock accounts

NO.76 拖放
For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

第 77 号 You notice an authentication failure entry for the DR user in the ITALog.
What is the correct process to fix this error? (Choose two.)

PrivateArk Client > Tools > Administrative Tools > Users and Groups > DR User > Update > Authentication > Update Password.

Create a new credential file, on the DR Vault, using the CreateCredFile utility and the newly set password.
. Create a new credential file, on the Primary Vault, using the CreateCredFile utility and the newly set password.

PVWA > User Provisioning > Users and Groups > DR User > Update Password.

PrivateArk Client > Tools > Administrative Tools > Users and Groups > PAReplicate User > Update > Authentication > Update Password.

第 78 号 VAULT authorizations may be granted to_____.

Vault Users

Vault Groups

LDAP Users

LDAP Groups

第 79 号 Your organization requires all passwords be rotated every 90 days.
Where can you set this regulatory requirement?

Master Policy

Safe Templates

PVWAConfig.xml

Platform Configuration

NO.80 When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

True; this is the default behavior

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the padr.ini file

True, if the AllowFailback setting is set to “yes” in the padr.ini file

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the dbparm.ini file

NO.81 As long as you are a member of the Vault Admins group you can grant any permission on any safe.

真

假