CyberArk Defender Practice Exam

Target account platforms can be restricted to accounts that are stored in specific Safes using the AllowedSafes property. - Answer- True Which one of the following reports is NOT generated by using the PVWA? - Answer- Safes List It is impossible to override Master Policy settings for a Platform. - Answer- False You have associated a logon account to one of your UNIX root accounts in the vault. When attempting to verify the root account's password the CPM will... - Answer- Log in first with the logon account, then run the su command to log in as root using the password in the vault. In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault? - Answer- FALSE. Because if credentials are not stored in the vault, the PSM will log into the target device as PSMConnect. VAULT authorizations may be granted to... - Answer- Vault Users, LDAP Users For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval. - Answer- On the safe in which the account is stored grant the group the 'Access safe without confirmation' authorization. It is impossible to override Master Policy settings for a Platform - Answer- FALSE What is the name of the Platform parameter that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy? - Answer- MinValidityPeriod When managing SSH keys, CPM automatically pushes the Private Key to all systems that use it. - Answer- FALSE PSM captures a record of each command that was issued in SQL Plus. - Answer- TRUE Using the SSH Key Manager it is possible to allow CPM to manage SSH Keys similarly to passwords. - Answer- TRUE Users who have the 'Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account. - Answer- FALSE