Question 1

As long as you are a member of the Vault Admins group you can grant any permission on any safe.

Options :

A : TRUE

B : FALSE

Answer: B

Question 2

In the Private Ark client, how do you add an LDAP group to a CyberArk group?

Options :

A : Select Update on the CyberArk group, and then click Add > LDAP Group

B : Select Update on the LDAP Group, and then click Add > LDAP Group

C : Select Member Of on the CyberArk group, and then click Add > LDAP Group

D : Select Member Of on the LDAP group, and then click Add > LDAP Group

Answer: D

Question 3

To ensure all sessions are being recorded, a CyberArk administrator goes to the master policy and makes

configuration changes.

Which configuration is correct?

Options :

A : Require privileged session monitoring and isolation = inactive; Record and save session activity = active.

B : Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive

C : Require privileged session monitoring and isolation = active; Record and save session activity = active.

D : Require privileged session monitoring and isolation = active; Record and save session activity = inactive.

Answer: C

Question 4

What is the purpose of the CyberArk Event Notification Engine service?

Options :

A : It sends email messages from the Central Policy Manager (CPM)

B : It sends email messages from the Vault

C : It processes audit report messages

D : It makes Vault data available to components

Answer: D

Question 5

Which PTA sensors are required to detect suspected credential theft?

Options :

A : Logs, Vault Logs

B : Logs, Network Sensor, Vault Logs

C : Logs, PSM Logs, CPM Logs

D : Logs, Network Sensor, EPM

Answer: A

Free PAM-DEF Mock Exam – Practice Online Confidently