Question 1

To ensure all sessions are being recorded, a CyberArk administrator goes to the master policy and makes

configuration changes.

Which configuration is correct?

Options :

A : Require privileged session monitoring and isolation = inactive; Record and save session activity = active.

B : Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive

C : Require privileged session monitoring and isolation = active; Record and save session activity = active.

D : Require privileged session monitoring and isolation = active; Record and save session activity = inactive.

Answer: C

Question 2

PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

Options :

A : True

B : False, the PTA can suspend sessions whether the session is made via the PSM or not

Answer: B

Question 3

Users can be restricted through certain CyberArk interfaces (e.g. PVWA or PACLI).

Options :

A : TRUE

B : FALSE

Answer: A

Question 4

You have been asked to secure a set of shared accounts in CyberArk whose passwords will need to be used by end users. The account owner wants to be able to track who was using an account at any given moment. Which security configuration should you recommend?

Options :

A : Configure one-time passwords for the appropriate platform in Master Policy

B : Configure shared account mode on the appropriate safe

C : Configure both one-time passwords and exclusive access for the appropriate platform in Master Policy.

D : Configure object level access control on the appropriate safe

Answer: D

Question 5

Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

Options :

A : Suspected credential theft

B : Over-Pass-The-Hash

C : Golden Ticket

D : Unmanaged privileged access

Answer: C

Higher Test Marks with Free Online PAM-DEF Exam Practice

Buying Options: