Skip to main content

PAM-DEF CyberArk Defender – PAM

  • CyberArk
  • 5 free sample questions

About this exam

PAM-DEF is the CyberArk exam CyberArk Defender – PAM. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
PAM-DEF
Vendor
CyberArk
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for PAM-DEF.

Question 1 (choose 3)

Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

  1. Option A:

    Discovery and Audit (DMA)

  2. Option B:
    Auto Detection (AD)
  3. Option C:
    Export Vault Data (EVD)
  4. Option D:
    On Demand Privileges Manager (OPM)
  5. Option E:

    Accounts Discovery

Show answer and explanation

Correct answer: A, B, E

Discovery and Audit (DMA), Auto Detection (AD), and Accounts Discovery are CyberArk components or products that can be used to discover Windows Services or Scheduled Tasks that use privileged accounts.

    Discovery and Audit (DMA) is a tool that scans Windows servers and workstations to identify privileged accounts that are used by Windows Services or Scheduled Tasks. DMA can also generate reports on the usage and risks of these accounts.

    Auto Detection (AD) is a feature of the CyberArk Privileged Account Security Solution that automatically detects and onboards privileged accounts that are used by Windows Services or Scheduled Tasks. AD can also monitor and rotate the passwords of these accounts.

    Accounts Discovery is a feature of the CyberArk Privileged Account Security Solution that scans the network to discover privileged accounts on various platforms, including Windows. Accounts Discovery can also identify accounts that are used by Windows Services or Scheduled Tasks.

References :

    : Discovery and Audit (DMA) User Guide

    : Auto Detection Implementation Guide

    : Accounts Discovery Implementation Guide

Question 2

When running a “Privileged Accounts Inventory” Report through the Reports page in PVWA on a specific safe, which permission/s are required on that safe to show complete account inventory information?

  1. Option A:

    List Accounts, View Safe Members

  2. Option B:

    Manage Safe Owners

  3. Option C:

    List Accounts, Access Safe without confirmation

  4. Option D:

    Manage Safe, View Audit

Show answer and explanation

Correct answer: A

The Privileged Accounts Inventory Report provides information about all the privileged accounts in the system, based on different filters, such as safe, platform, policy, and owner. To run this report through the Reports page in PVWA on a specific safe, the user needs to have the following permissions on that safe:

    List Accounts: This permission allows the user to view the accounts in the safe and their properties, such as name, address, platform, and policy.

    View Safe Members: This permission allows the user to view the members of the safe and their authorizations, such as owners, users, and groups.

These permissions are required to show complete account inventory information for the specific safe. Other permissions, such as Manage Safe Owners, Access Safe without confirmation, Manage Safe, and View Audit, are not relevant for this report.  References :  Reports and Audits - CyberArk ,  Safe Member Authorizations

See all 5 free sample questions