PAM-DEF無料問題集「CyberArk Defender

質問 1

You want to generate a license capacity report.
Which tool accomplishes this?

（A）PrivateArk Client

（B）DiagnoseDB Report

（C）Password Vault Web Access

（D）RestAPI

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

A Vault administrator have associated a logon account to one of their Unix root accounts in the vault. When attempting to verify the root account's password the Central Policy Manager (CPM) will:

（A）none of these

（B）ignore the logon account and attempt to log in as root

（C）log in first with the logon account, then run the SU command to log in as root using the password in the Vault

（D）prompt the end user with a dialog box asking for the login account to use

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

（A）PSM (i.e., launching connections by clicking on the "Connect" button in the PVWA)

（B）PSM for SSH (previously known as PSM SSH Proxy)

（C）PSM for Windows (previously known as RDP Proxy)

（D）All of the above

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

You have been asked to turn off the time access restrictions for a safe.
Where is this setting found?

（A）Password Vault Web Access (PVWA)

（B）Vault

（C）PrivateArk

（D）RestAPI

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Match the log file name with the CyberArk Component that generates the log.

正解：

Explanation

References:
* Log Files
* [Defender PAM Sample Items Study Guide], Question 46, page 16

質問 6

The Password upload utility can be used to create safes.

（A）FALSE

（B）TRUE

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

正解：

Explanation

According to the CyberArk documentation1, the prerequisites for running the PSM Health Check are:
* PSM service installed on Windows 2016 or Windows 2019
* Web Server (IIS 8.5) role is installed
* A valid SSL certificate is installed on the Web Server
Therefore, these prerequisites are mandatory for the PSM Health Check to work properly. The PSM service installed on Windows 2008 R2 is not mandatory, as it is not supported by the PSM Health Check2.
References: PSM Health Check, PSM Health Check - CyberArk

質問 8

In a rule using "Privileged Session Analysis and Response" in PTA, which session options are available to configure as responses to activities?

（A）Pause, Terminate, None

（B）Suspend, Terminate, Lock Account

（C）Suspend, Terminate

（D）Suspend, Terminate, None

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

VAULT authorizations may be granted to_____.

（A）Vault Users

（B）Vault Groups

（C）LDAP Users

（D）LDAP Groups

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

The primary purpose of exclusive accounts is to ensure non-repudiation (Individual accountability).

（A）FALSE

（B）TRUE

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

Which item is an option for PSM recording customization?

（A）Universal keystrokes text recorder with windows events text recorder disabled

（B）Custom audio recording for windows events

（C）Windows events text recorder with automatic play-back

（D）Windows events text recorder and universal keystrokes recording simultaneously

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

The Accounts Feed contains:

（A）Accounts that were discovered by CyberArk that have not yet been onboarded

（B）Accounts that were discovered by CyberArk in the last 30 days

（C）All accounts added to the vault in the last 30 days

（D）All users added to CyberArk in the last 30 days

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

Which of these accounts onboarding methods is considered proactive?

（A）A Rest API integration with account provisioning software

（B）A DNA scan

（C）Detecting accounts with PTA

（D）Accounts Discovery

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

Which authorizations are required in a recording safe to allow a group to view recordings?

正解：

Explanation
* Retrieve accounts/files: Required
* List accounts/files: Required
* View audit: Required
* Access Safe without confirmation: Not Required
* Create Folders: Not Required
Comprehensive Explanation: To allow a group to view recordings in a recording safe, the required authorizations are Retrieve accounts/files, List accounts/files, and View audit. These authorizations enable the group members to access and view the session recordings stored within the safe. The Retrieve accounts/files permission allows users to retrieve files during PSM sessions. The List accounts/files permission enables users to see the list of accounts and files within the safe. The View audit authorization is necessary for users to view the audit records associated with the recordings1.
References:
* CyberArk Docs - Monitor Privileged Sessions

質問 15

You want to give a newly-created group rights to review security events under the Security pane. You also want to be able to update the status of these events.
Where must you update the group to allow this?

（A）in the PTAAuthorizationGroups parameter, found in Administration > Options > General

（B）in the SecurityEventsAuthorizationGroups parameter, found in Administration > Security > Options

（C）in the SecurityEventsFeedAuthorizationGroups parameter, found in Administration > Options > General

（D）in the PTAAuthorizationGroups parameter, found in Administration > Options > PTA

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 16

Which statement about the Master Policy best describes the differences between one-time password and exclusive access functionality?

（A）Exclusive access means that only a specific group of users may use the account. After an account on a one-time password platform is used, the account is deleted from the safe automatically.

（B）Exclusive access is enabled by default in the Master Policy. One-time password should only be enabled for emergencies.

（C）Exclusive access allows only one person to check-out an account at a time. One-time password schedules an account for a password change after the MinValidityPeriod period expires.

（D）Exclusive access locks the account indefinitely. One-time password can be used replace invalid account passwords.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 17

Which user is automatically added to all Safes and cannot be removed?

（A）Administrator

（B）Master

（C）Auditor

（D）Operator

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 18

A logon account can be specified in the platform settings.

（A）False

（B）True

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 19

A Logon Account can be specified in the Master Policy.

（A）FALSE

（B）TRUE

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

PAM-DEF 無料問題集「CyberArk Defender - PAM」

弊社を連絡する

関連リンク

トップ試験