CyberArk Defender Sample - PAM Final
Exam Questions & Answers 2026-2027
Edition.
Which values are acceptable in the address field of an account? - Answer any name that is
resolvable by the Central Policy Manager (CPM) server is acceptable
The Accounts feed contains: - Answer accounts that were discovered by CyberArk that have
not yet been onboarded
Accounts discovery allows secure connections to domain controllers? (T/F) - Answer True
Which of these accounts onboarding methods is considered proactive? - Answer A Rest API
integration with account provisioning software
When creating an onboarding rule it will be executed upon: - Answer any future accounts
discovered by a discovery process.
What are the functions of the Remote Control Agent service? - Answer 1. Allow remote
monitoring of the Vault
2. Sends SNMP traps from the Vault
3. Allows CyberArk services to be managed (start/stop/status) remotely
The Vault administrator can change the Vault license by uploading the new license to the system
Safe: (T/F) - Answer True
CyberArk implements license limits by controlling the number and types of users that can be
provisioned in the Vault (T/F) - Answer True
PSM for windows (Previously know as RDP Proxy) supports connections to the which of the
following target systems. - Answer 1. Windows
2. Unix
3. Oracle
PSM for SSH (previously know as PSM-SSH Proxy) supports connections to which of the
following target systems - Answer 1. Unix
, Within the Vault each password is encrypted by: - Answer It own unique key.
Which utilities could a Vault administrator use to change debugging levels on the Vault without
having to restart the Vault? - Answer 1. PAR Agent
2. PrivateArk Server Central Administration
How does a Vault administrator apply a new license file? - Answer Upload the license.xml file
to the system safe
Which keys are required to be present in order to start the PrivateArk Server service? - Answer
1. Recover public key
2. Server Key
What is the purpose of the CyberArk Event Notification Engine service? - Answer It send
emails from the Vault
What is the purpose of the PrivateArk Database service? - Answer Maintains Vault Metadata
What is the purpose of the PrivateArk Server service? - Answer Makes Vault data accessible to
components.
Select the best practice for storing the Master CD - Answer Store the CD in a secure location,
such as a physical safe.
Which of the following are secure options for storing the contents of the Operator CD, while still
allowing contents to be accessible upon a planned Vault restart? Choose the three correct
options - Answer 1. Store CD in a physical safe & mount the CD every time Vault maintenance
is performed.
2. Copy the entire content of the CD to a folder on the Vault Server and secure it with NTFS
permissions.
3. Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from
the CD to a folder on the Vault Server and secure it with NTFS permissions
Which service should NOT be running on the DR Vault when the primary Production Vault is up?
- Answer PrivateArk Server
Which of the following logs contain information about errors related to PTA? - Answer
diamond.log
Exam Questions & Answers 2026-2027
Edition.
Which values are acceptable in the address field of an account? - Answer any name that is
resolvable by the Central Policy Manager (CPM) server is acceptable
The Accounts feed contains: - Answer accounts that were discovered by CyberArk that have
not yet been onboarded
Accounts discovery allows secure connections to domain controllers? (T/F) - Answer True
Which of these accounts onboarding methods is considered proactive? - Answer A Rest API
integration with account provisioning software
When creating an onboarding rule it will be executed upon: - Answer any future accounts
discovered by a discovery process.
What are the functions of the Remote Control Agent service? - Answer 1. Allow remote
monitoring of the Vault
2. Sends SNMP traps from the Vault
3. Allows CyberArk services to be managed (start/stop/status) remotely
The Vault administrator can change the Vault license by uploading the new license to the system
Safe: (T/F) - Answer True
CyberArk implements license limits by controlling the number and types of users that can be
provisioned in the Vault (T/F) - Answer True
PSM for windows (Previously know as RDP Proxy) supports connections to the which of the
following target systems. - Answer 1. Windows
2. Unix
3. Oracle
PSM for SSH (previously know as PSM-SSH Proxy) supports connections to which of the
following target systems - Answer 1. Unix
, Within the Vault each password is encrypted by: - Answer It own unique key.
Which utilities could a Vault administrator use to change debugging levels on the Vault without
having to restart the Vault? - Answer 1. PAR Agent
2. PrivateArk Server Central Administration
How does a Vault administrator apply a new license file? - Answer Upload the license.xml file
to the system safe
Which keys are required to be present in order to start the PrivateArk Server service? - Answer
1. Recover public key
2. Server Key
What is the purpose of the CyberArk Event Notification Engine service? - Answer It send
emails from the Vault
What is the purpose of the PrivateArk Database service? - Answer Maintains Vault Metadata
What is the purpose of the PrivateArk Server service? - Answer Makes Vault data accessible to
components.
Select the best practice for storing the Master CD - Answer Store the CD in a secure location,
such as a physical safe.
Which of the following are secure options for storing the contents of the Operator CD, while still
allowing contents to be accessible upon a planned Vault restart? Choose the three correct
options - Answer 1. Store CD in a physical safe & mount the CD every time Vault maintenance
is performed.
2. Copy the entire content of the CD to a folder on the Vault Server and secure it with NTFS
permissions.
3. Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from
the CD to a folder on the Vault Server and secure it with NTFS permissions
Which service should NOT be running on the DR Vault when the primary Production Vault is up?
- Answer PrivateArk Server
Which of the following logs contain information about errors related to PTA? - Answer
diamond.log
