Important CyberArk PAM-DEF Exam Questions

Answer: A

Explanation:

By default, external vault users and groups are synchronized once every 24 hours between 1 AM and 5 AM.This synchronization schedule is determined by theAutoSyncExternalObjectsparameter in theDBParm.inifile, which specifies that the Vault's external users and groups will be synchronized with the External Directory during this time frame1.

CyberArk Docs - Synchronize External Users and Groups in the Vault with the External Directory

Answer: B, C, E

Explanation:

Dependent accounts are accounts that represent resources such as Windows Services, Windows Scheduled Tasks, and others, which are accessed from a target machine and require the same credentials as the target machine. The CyberArk Privileged Account Security Solution's Central Policy Manager (CPM) supports out-of-the-box dependent accounts for Windows Services, Windows Scheduled Tasks, and Windows Registry. When changing a password, the CPM synchronizes the target account password with all other occurrences of that password in any related dependent accounts.This ensures that all dependent accounts are updated simultaneously to maintain security and functionality12.Reference:

CyberArk Docs: Manage dependent accounts1

CyberArk Docs: Supported dependent accounts

Answer: A

Explanation:

To ensure that each component server is operational, you can log on to the Privileged Vault Web Access (PVWA) with the version 10 user interface, navigate to the Healthcheck section, and validate that each component server is connected to the Vault.The System Health dashboard in PVWA provides a high-level visual representation of the health status of the different CyberArk components, including whether the Vault service is up and whether the component servers are connected1.

CyberArk Docs - Monitor system health

Answer: B

Explanation:

The report that shows the accounts that are accessible to each user is the Entitlement report. According to the web page in the edge browser, the Entitlement report provides information about users' entitlement rights in PAM - Self-Hosted regarding user, Safe, active platform, target machine, target account, etc. This report includes each user's effective access control and authorization level on each account that the user has access to in PAM - Self-Hosted.The Entitlement report can be generated in PVWA or PrivateArk1.

Answer: A

Explanation:

To enable access over SSH to a Unix account through both Privileged Session Manager (PSM) and Privileged Session Manager Proxy (PSMP), the platform must contain the necessary connection components for both PSM-SSH and PSMP-SSH.This ensures that the system can handle SSH connections through PSM for a native user experience and through PSMP for secure, transparent connections to remote systems12.Reference:

CyberArk Docs: Connect through PSM for SSH1

CyberArk Docs: Connect to Unix machines (using PSM for SSH)2