Question 1

Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed?

Options :

A : HeadStartInterval

B : Interval

C : ImmediateInterval

D : The CPM does not change the password under this circumstance

Answer: C

Question 2

Which statement is true about setting the reconcile account at the platform level?

Options :

A : This is the only way to enable automatic reconciliation of account passwords.

B : CPM performance will be improved when the reconcile account is set at the platform level.

C :

A rule can be used to specify the reconcile account dynamically or a specific reconcile account can be selected.

D :

This configuration prevents the association from becoming broken if the reconcile account is moved to a different safe.

Answer: C

Question 3

Which certificate type do you need to configure the vault for LDAP over SSL?

Options :

A : the CA Certificate that signed the certificate used by the External Directory

B : a CA signed Certificate for the Vault server

C : a CA signed Certificate for the PVWA server

D : a self-signed Certificate for the Vault

Answer: A

Question 4

To ensure all sessions are being recorded, a CyberArk administrator goes to the master policy and makes

configuration changes.

Which configuration is correct?

Options :

A : Require privileged session monitoring and isolation = inactive; Record and save session activity = active.

B : Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive

C : Require privileged session monitoring and isolation = active; Record and save session activity = active.

D : Require privileged session monitoring and isolation = active; Record and save session activity = inactive.

Answer: C

Question 5

In a rule using “Privileged Session Analysis and Response” in PTA, which session options are available to configure as responses to activities?

Options :

A : Suspend, Terminate, None

B : Suspend, Terminate, Lock Account

C : Pause, Terminate, None

D : Suspend, Terminate

Answer: D

Higher Test Marks with Free Online PAM-DEF Exam Practice