CyberArk Defender Exam

In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault? - Answer- FALSE. Because the user can also enter credentials manually using Secure Connect Which CyberArk components or products can be used to discover Windows Services of Scheduled Taks that use privileged accounts? - Answer- Discovery and Audit (DNA) Auto Detection (AD) Accounts Discovery What conditions must be met in order to login into the vault as the Master user? - Answer- Logon must be originated from the console of the Vault server or an EmergencyStation defined in DBP User must provide the correct master password.] Logon requires the Recovery Private Key to be accessible to the vault. When managing SSH keys, CPM automatically pushed the Public Key to the target systems. - Answer- TRUE Which of the following can be configured in the Master Policy? - Answer- Dual Control Exclusive Passwords One Time Passwords Password Aging Rules The primary purpose of exclusive accounts is to ensure non-repudiation (individual accountability). - Answer- TRUE If a user is a member of more than one group that has authorizations on a safe, by default that user is granted - Answer- the cumulative permissions of all the groups to which that user belongs It is possible to restrict the time of day, or day of week that a change process can occur. - Answer- TRUE The System safe allows access to the Vault configuration files - Answer- TRUE One can create exceptions to the Master Policy based on - Answer- Platforms I