CAU201 CyberArk Defender - PAM Questions and Answers

Disaster Recovery

Distributed Vaults

Replicate

High Availability

Ensure your naming convention is no longer than 20 characters.

Combine environments, owners and platforms to minimize the total number of safes created.

Safe owners should determine the safe name to enable them to easily remember it.

The use of these characters V:*<>".| is not allowed.

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how often the CPM rests between password changes.

To Control the maximum amount of time the CPM will wait for a password change to complete.

To test that CyberArk is storing accurate credentials for accounts

To change the password of an account according to organizationally defined password rules

To allow CyberArk to manage unknown or lost credentials

To generate a new complex password

Use Accounts

Retrieve Accounts

Authorize Password Requests

Access Safe without Authorization

Vault Admins

Security Admins

Security Operators

Auditors

Accounts that were discovered by CyberArk in the last 30 days

Accounts that were discovered by CyberArk that have not yet been onboarded

All accounts added to the vault in the last 30 days

All users added to CyberArk in the last 30 days

Require dual control password access Approval

Enforce check-in/check-out exclusive access

Enforce one-time password access

Enforce check-in/check-out exclusive access & Enforce one-time password access

TRUE

FALSE

ignore the logon account and attempt to log in as root

prompt the end user with a dialog box asking for the login account to use

log in first with the logon account, then run the SU command to log in as root using the password in the Vault

none of these

PVWAUsers

Vault Admins

Auditors

PVWAMonitor

TRUE

FALSE

True

False

You must specify an existing Safe where are account will be stored when it is on boarded to the Vault

You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.

You can specify the name of a new Platform that will be created and associated with the account

Any account that is on boarded can be automatically reconciled regardless of the platform it is associated with.

TRUE

FALSE

TRUE

FALSE

Select Update on the CyberArk group, and then click Add > LDAP Group

Select Update on the LDAP Group, and then click Add > LDAP Group

Select Member Of on the CyberArk group, and then click Add > LDAP Group

Select Member Of on the LDAP group, and then click Add > LDAP Group

Min Validity Period

Interval

Immediate Interval

Timeout

True

False

Recording is of a PSM for SSH session.

The browser you are using is out of date and needs an update to be supported.

You do not have the “View Audit” permission on the safe where the account is stored.

You need to update the recorder settings in the platform to enable screen capture every 10000 ms or less.

Dual Control

One Time Passwords

Exclusive Passwords

Password Reconciliation

Ticketing Integration

Required Properties

Custom Connection Components