CyberArk Defender Exam

In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault? - answer-FALSE. Because the user can also enter credentials manually using Secure Connect Which CyberArk components or products can be used to discover Windows Services of Scheduled Taks that use privileged accounts? - answer-Discovery and Audit (DNA) Auto Detection (AD) Accounts Discovery What conditions must be met in order to login into the vault as the Master user? - answer-Logon must be originated from the console of the Vault server or an EmergencyStation defined in DBP User must provide the correct master password.] Logon requires the Recovery Private Key to be accessible to the vault. When managing SSH keys, CPM automatically pushed the Public Key to the target systems. - answer-TRUE Which of the following can be configured in the Master Policy? - answer-Dual Control Exclusive Passwords One Time Passwords Password Aging Rules The primary purpose of exclusive accounts is to ensure non-repudiation (individual accountability). - answer-TRUE If a user is a member of more than one group that has authorizations on a safe, by default that user is granted - answer-the cumulative permissions of all the groups to which that user belongs It is possible to restrict the time of day, or day of week that a change process can occur. - answer-TRUE The System safe allows access to the Vault configuration files - answer-TRUE One can create exceptions to the Master Policy based on - answer-Platforms It is possible to restrict the time of day, or day of week that a verify process can occur. - answer-TRUE Which report could show all audit data in the vault? - answer-Activity log All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy and connect buttons on those passwords at any time without confirmation. The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of the Operations Managers. lThe members of the OperationsManagers never need to be able to use the show, copy or connect buttons themselves. Which safe permissions do you need to grant to the UnixAdmins? - answer-Use Accounts List Accounts Retrieve Accounts Access Safe without Authorization Auto-Detection can be configured to leverage LDAP/S. - answer-TRUE Which utilities could you use to change the debugging levels on the vault without having to restart the vault. - answer-PAR Agent PrivateArk Server Central Administration One tiem passwords reduce the risk of the Pass the Hash vulnerabilities in Windows. - answer-TRUE Ad-Hoc access (formerly Secure Connect) provides the following features - answer-PSM connections to target devices that are not managed by CyberArk Session Recording Real-time live session monitoring When managing SSH keys, CPM automatically pushes the Private Key to all systems that use it. - answer-FALSE It is impossible to override Master Policy settings for a Platform - answer-FALSE Which of the following options is not set in the Master Policy? - answer-Password Complexity Where can the attributes below be configured? Password Expiration Time Enabling / Disabling of the Connection through PSM The use of One-Time-Passwords - answer-Master Policy Which of the following reports is NOT generated by using the PVWA? - answer-Safes List Which user is automatically given all Safe Authorizations on all Safes? - answer-Master Which Built-In group grants access to the ADMINISTRATION page? - answer-Vault Admins What is the purpose of the Immediate Interval setting in the CPM policy? - answer-To control how often the CPM looks for User Initiated CPM work. Users can be restricted to using certain CyberArk interfaces (e.g. PVWA or PACLI). - answer-TRUE A Reconcile Account can be specified in the platform settings. - answer-TRUE PSM captures a record of each command that was issued in SQL Plus. - answer-TRUE PSM captures a record of each command that was executed in Unix. - answer-TRUE What is the name of the Platform parameter that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy? - answer-MinValidityPeriod Users who have the "Access Safe without confirmation" permission on a safe where accounts are configured for Dual Control, still need to request approval to use the account. - answer-FALSE In Accounts Discovery, you can configured a Windows discovery to scan - answer-only one OU. The Password upload utility can be used to create safes. - answer-TRUE When on-boarding accounts using the Accounts Feed, which of the following is true? - answer-You can specify the name of a new safe that will be created where the account will be stored when it is on-boarded to the Vault. Platform settings are applied to - answer-Individual accounts It is possible to disable the Show and Copy buttons without removing the Retrieve permissions on a safe. - answer-TRUE The vault does not support Role Based Access Control. - answer-FALSE It is possible to control the hours of the day during which a safe may be used. - answer-TRUE Which of the following statements are NOT true when enabling PSM recording fo