Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. CyberArk
  5. PAM-DEF

CyberArk PAM-DEF Exam
CyberArk Defender - PAM (Page 3 )

Updated On: 12-Feb-2026
Page 3 of 22
PDF with 239 Questions

A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request.
What is the correct location to identify users or groups who can approve?

  1. PVWA > Administration > Platform Con guration > Edit Platform > UI & Work ow > Dual Control > Approvers
  2. PVWA > Policies > Access Control (Safes) > Select the safe > Safe Members > Work ow > Authorize Password Requests
  3. PVWA > Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers
  4. PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)

Answer(s): B



What must you specify when con guring a discovery scan for UNIX? (Choose two.)

  1. Vault Administrator
  2. CPM Scanner
  3. root password for each machine
  4. list of machines to scan
  5. safe for discovered accounts

Answer(s): B,D



To change the safe where recordings are kept for a speci c platform, which setting must you update in the platform con guration?

  1. SessionRecorderSafe
  2. SessionSafe
  3. RecordingsPath
  4. RecordingLocation

Answer(s): A



Which processes reduce the risk of credential theft? (Choose two.)

  1. require dual control password access approval
  2. require password change every X days
  3. enforce check-in/check-out exclusive access
  4. enforce one-time password access

Answer(s): C,D



You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.
How can this be con gured to allow for password management using least privilege?

  1. Con gure each CPM to use the correct logon account.
  2. Con gure each CPM to use the correct reconcile account.
  3. Con gure the UNIX platform to use the correct logon account.
  4. Con gure the UNIX platform to use the correct reconcile account.

Answer(s): C






Post your Comments and Discuss CyberArk PAM-DEF exam prep with other Community members:

Join the PAM-DEF Discussion