최신 PAM-DEF 무료덤프 - CyberArk Defender

문제1

Which PTA sensors are required to detect suspected credential theft?

A. Logs, Network Sensor, EPM

B. Logs, Network Sensor, Vault Logs

C. Logs, Vault Logs

D. Logs, PSM Logs, CPM Logs

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제2

The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.
How are these keys managed?

A. CyberArk stores Private keys in the Vault and updates Public keys on target systems.

B. CyberArk stores Public keys in the Vault and updates Private keys on target systems.

C. CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.

D. CyberArk stores both Private and Public keys and can update target systems with either key.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제3

What is the purpose of the HeadStartlnterval setting m a platform?

A. It alerts users of upcoming password changes x number of days before expiration.

B. It instructs the AIM Provider to 'skip the cache' during the defined time period

C. It determines how far in advance audit data is collected tor reports

D. It instructs the CPM to initiate the password change process X number of days before expiration.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제4

When managing SSH keys, the CPM stored the Private Key

A. In the Vault

B. A & B

C. On the target server

D. Nowhere because the private key can always be generated from the public key.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Where can you check that the LDAP binding is using TCP/636?

A. in Active Directory under "Users OU" => "User Properties" => "External Bindings" => "Port"

B. in PrivateArk Client, under "Tools" => "Administrative Tools" => "Directory Mapping" => ""

C. in PVWA, under "LDAP Integration" => "LDAP" => "Directories" => "" => "Hosts" => "Host"

D. From the PVWA, connect to the domain controller using Test-NetConnection on Port 636.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Match the Status of Service on a DR Vault to what is displayed when it is operating normally in Replication mode.

정답:

Explanation
CyberArk Hardened Windows Firewall -> Running
PrivateArk Database -> Running
PrivateArk Server -> Stopped
CyberArk Vault Disaster Recovery -> Running
CyberArk Event Notification Engine -> Stopped
* Comprehensive Explanation: A DR Vault is a Vault that acts as a standby replica of the Primary Vault and is ready to take its place when the Primary Vault is unavailable. The DR Vault operates in Replication mode, which means it continuously replicates the data and metadata from the Primary Vault.
In Replication mode, the following services have the following status on the DR Vault:
* Cyber-Ark Hardened Windows Firewall: This service provides firewall protection for the Vault server.
It should be running on the DR Vault to ensure security.
* PrivateArk Database: This service manages the database that stores the metadata of the Vault. It should be stopped on the DR Vault, because the database is not active in Replication mode. The database is only activated when the DR Vault switches to Production mode.
* PrivateArk Server: This service manages the Vault server and its communication with other components. It should be stopped on the DR Vault, because the Vault server is not active in Replication mode. The Vault server is only activated when the DR Vault switches to Production mode.
* CyberArk Vault Disaster Recovery: This service manages the replication process between the Primary Vault and the DR Vault. It should be running on the DR Vault to ensure data synchronization and readiness for failover.
* Cyber-Ark Event Notification Engine: This service manages the event notifications and alerts for the
* Vault. It should be stopped on the DR Vault, because the event notifications are not relevant in Replication mode. The event notifications are only activated when the DR Vault switches to Production mode.
References: Primary-DR environment - CyberArk, Replicate the Primary Vault to the Satellite Vaults - CyberArk

문제7

You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to
[b]change [/b] the root account's password the CPM will.....

A. Log in to the system as the logon account, then change roofs password

B. None of these

C. Log in to the system as root, then change root's password

D. Log in to the system as the logon account, run the su command to log in as root, and then change root's password.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Users who have the 'Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

A. FALSE

B. TRUE

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Which values are acceptable in the address field of an Account?

A. It must be a Fully Qualified Domain Name (FQDN)

B. It must be NetBIOS name

C. It must be an IP address

D. Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제10

When should vault keys be rotated?

A. whenever a CyberArk user leaves the organization

B. annually

C. when migrating to a new data center

D. when it is copied to file systems outside the vault

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제11

An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?

A. PSMMaster

B. PSMGwUser

C. PSMAdminConnect

D. PSMConnect

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제12

In a default CyberArk installation, which group must a user be a member of to view the "reports" page in PVWA?

A. Operators

B. PVWAReports

C. PVWAMonitor

D. ReportUsers

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제13

How do you create a cold storage backup?

A. On the DR Vault, configure the cold storage backup path in TSParm.ini file.

B. Configure the backup options in the PVWA.

C. On the DR Vault, install PAReplicate according to the Installation guide, configure the logon ini file, and define the Schedule tasks for full and incremental backups.

D. Install the Vault Backup utility on a different machine from the Enterprise Password Vault server and trigger the full backup.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

최신 PAM-DEF 무료덤프 - CyberArk Defender - PAM

우리와 연락하기

유용한 링크

최신 업데이트