CyberArk Def Exam Questions

What do you need on the Vault to support LDAP over SSL?

• CA Certificate(s) used to sign the External Directory certificate

• RECPRV.key

• a private key for the external directory

• self-signed Certificate(s) for the Vault

You are troubleshooting a PVWA slow response. Which log files should you analyze first? (Choose two.)

• ITALog.log

• web.config

• CyberArk.WebApplication.log

• CyberArk.WebConsole.log

What is the easiest way to duplicate an existing platform?

• From PrivateArk, copy/paste the appropriate Policy.ini file; then rename it.

• From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.

• From PrivateArk, copy/paste the appropriate settings in PVConfiguration.xml; then update the policyName variable.

• From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click "Save as" INSTEAD of save to duplicate and rename the platform.

Due to corporate storage constraints, you have been asked to disable session monitoring and recording for 500 testing accounts used for your lab environment. How do you accomplish this?

• Master Policy>select Session Management>add Exceptions to the

  platform(s)>disable Session Monitoring and Recording policies

• Administration>Platform Management>select the platform(s)>disable Session

  Monitoring and Recording

• Polices>Access Control (Safes)>select the safe(s)>disable Session Monitoring

  and Recording policies

• Administration>Conguration Options>Options>select Privilege Session

  Management>disable Session Monitoring and Recording policies

A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request. What is the correct location to identify users or groups who can approve?

• PVWA > Administration > Platform Conguration > Edit Platform > UI & Workow

  > Dual Control > Approvers

• PVWA > Policies > Access Control (Safes) > Select the safe > Safe Members

  > Workow > Authorize Password Requests

• PVWA > Account List > Edit > Show Advanced Settings > Dual Control > Direct

  Managers

• PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)

What must you specify when configuring a discovery scan for UNIX? (Choose two.)

• Vault Administrator

• CPM Scanner

• root password for each machine

• list of machines to scan

• safe for discovered accounts

To change the safe where recordings are kept for a specific platform, which setting must you update in the platform configuration?

• SessionRecorderSafe

• SessionSafe

• RecordingsPath

• RecordingLocation

Which processes reduce the risk of credential theft? (Choose two.)

• equire dual control password access approval

• require password change every X days

• enforce check-in/check-out exclusive access

• enforce one-time password access

You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account. How can this be configured to allow for password management using least privilege?

• Congure each CPM to use the correct logon account.

• Congure each CPM to use the correct reconcile account.

• Congure the UNIX platform to use the correct logon account.

• Congure the UNIX platform to use the correct reconcile account.

ADR Vault became active due to a failure of the primary Vault. Service on the primary Vault has now been restored. Arrange the first steps to return the DR vault to its normal standby mode in the correct sequence.

• 1. Shutdown PrivateArk Service

• ser Failover Mode = No

• Start PrivateArk DR Service