PAM-DEF Accounts Practice Questions
The free PAM-DEF: CyberArk Defender – PAM questions that deal with accounts, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #1
Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.
Correct answer: A
Explanation
This parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests. It is set in the Master Policy under the Dual Control section. The value of this parameter determines the frequency of the CPM’s verification process for accounts that have been accessed by users who have received confirmation from authorized Safe owners. The CPM will change the password of these accounts according to the value of this parameter. References: • Dual Control - CyberArk • Dual control in V10 Interface - docs.cyberark.com • PAM-DEF CyberArk Defender – PAM
Question #2
Which accounts can be selected for use in the Windows discovery process? (Choose two.)
Select 2 answers.
Correct answer: A, B
Explanation
During the Windows discovery process in CyberArk Defender PAM, accounts that can be selected for use include an account that is already stored in the Vault and an account that is specified by the user. The discovery process scans predefined machines for new and modified accounts and their dependencies. After the scan, accounts that should be onboarded into the Vault for secure and automatic management are identified12. References: The information provided is based on general knowledge of CyberArk PAM best practices and the account discovery process as outlined in CyberArk’s official documentation1
Question #3
The primary purpose of exclusive accounts is to ensure non-repudiation (Individual accountability).
Correct answer: A
Explanation
The primary purpose of exclusive accounts is to ensure non-repudiation (individual accountability). Exclusive accounts are accounts that can only be used by one user at a time, and are locked during usage. This means that no other user can access the same account until the current user releases it or the session expires. By using exclusive accounts, the organization can enforce individual accountability and traceability for the actions performed on the target systems. Exclusive accounts also reduce the risk of credential theft and unauthorized access, as the passwords are changed every time they are retrieved by a user1. Exclusive accounts can be configured in the Master Policy under the Password Management section, by enabling the Exclusive Access rule2. References: • 1: The Master Policy, One Time Password subsection • 2: The Master Policy, Exclusive Access subsection
Question #7
You have been given the requirement that certain accounts cannot have their passwords updated during business hours. How can you set up a configuration to meet this requirement?
Correct answer: B
Explanation
To ensure that certain accounts do not have their passwords updated during business hours, you can configure the password change parameters within the platform settings to specify the permitted time frame for updates. This involves setting the FromHour andToHour parameters to define a window outside of business hours during which the CyberArk Central Policy Manager (CPM) will perform automatic password changes1. By doing so, you can control when password changes occur and ensure compliance with the specified requirement. References: • CyberArk Community: Discussion on configuring automatic password change parameters
Continue with PAM-DEF: CyberArk Defender – PAM
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in PAM-DEF: CyberArk Defender – PAM, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.