When managing SSH keys, the CPM stores the Public Key
Answer(s): B
When managing SSH keys, the CPM stores the public key on the target server. The CPM generates a new random SSH key pair and updates the public SSH key on the target machine. The public SSH key is stored in the home directory of the privileged user on the target machine, usually in the file ~/.ssh/authorized_keys. The public SSH key is not stored in the Vault, as this would be redundant and unnecessary. The public SSH key cannot be generated from the private key, as this would defeat the purpose of asymmetric encryption.
Manage SSH KeysSSH Key ManagerUse SSH Keys
Accounts Discovery allows secure connections to domain controllers.
Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed.
Answer(s): A
Vault admins must manually add the auditors' group to newly created safes so auditors will have sufficient access to run reports.
Vault admins do not need to manually add the auditors' group to newly created safes, because the auditors' group is automatically added to every safe in the vault by default. The auditors' group has the View Audit authorization, which allows its members to view the safe's activity and run reports. However, vault admins can remove the auditors' group from specific safes if they want to restrict the access of the auditors.
Predefined users and groups - CyberArk
Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?
Answer(s): D
All of the Privileged Session Management solutions provide a detailed audit log of session activities. PSM, PSM for Windows, and PSM for SSH enable organizations to secure, control and monitor privileged access to network devices by using Vaulting technology to manage privileged accounts and create detailed session audits and video recordings of all IT administrator privileged sessions on remote machines. PSM also provides additional audit features such as SQL Command Level Audit, Windows Events Audit, and Universal Keystrokes Audit. PSM for Web captures a detailed transcript of cloud application user activity to enable a security manager or auditor the ability to monitor sessions for suspicious or restricted operations.
Monitor Privileged Sessions - CyberArkPrivileged Session Manager for Web - CyberArk
What is the primary purpose of Dual Control?
Dual control is a feature of CyberArk Defender PAM that enables authorized Safe owners to either grant or deny requests to access accounts. This feature adds an additional measure of protection, in that it enables you to see who wants to access the information in the Safe, when, and for what purpose. The Master Policy enables organizations to ensure that passwords can only be retrieved after permission or `confirmation' has been granted from an authorized Safe Owner (s). This is known as Dual Control. The primary purpose of dual control is to prevent a single user from accessing a sensitive account without authorization, which could lead to fraud or misuse of privileges. By requiring confirmation from another authorized user, dual control ensures that there is a `collusion to commit' fraud, meaning that at least two users are involved in the malicious activity and are accountable for it.
Dual Control - CyberArkDual Control - CyberArkDual control in V10 Interface - docs.cyberark.com
Time of day or day of week restrictions on when password verifications can occur configured in ____________________.
Answer(s): C
Time of day or day of week restrictions on when password verifications can occur are configured in the Safe settings. This is a security feature that prevents Safes from being opened except at certain times (e.g., 8 a.m. to 5 p.m.). If a user tries to enter at a time that has not been designated for access, they will receive a message that informs them that the Safe is unavailable.
Advanced Safe Management
Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.
This parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests. It is set in the Master Policy under the Dual Control section. The value of this parameter determines the frequency of the CPM's verification process for accounts that have been accessed by users who have received confirmation from authorized Safe owners. The CPM will change the password of these accounts according to the value of this parameter.
Dual Control - CyberArkDual control in V10 Interface - docs.cyberark.comPAM-DEF CyberArk Defender PAM Questions and Answers - Marks4sure
Post your Comments and Discuss CyberArk PAM-DEF exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the PAM-DEF content, but please register or login to continue.