更新されたのは2024年05月19日認定試験PAM-DEF問題集で練習テスト問題
更新された検証済みのPAM-DEF問題集と解答で合格保証もしくは全額返金
質問 # 96
Where can a user with the appropriate permissions generate a report? (Choose two.)
- A. PrivateArk Server Monitor
- B. PrivateArk Client
- C. PARClient
- D. PVWA > Reports
- E. Cluster Vault Manager
正解：C、D
質問 # 97
According to CyberArk, which issues most commonly cause installed components to display as disconnected in the System Health Dashboard? (Choose two.)
- A. vault license expiry
- B. network instabilities/outages
- C. credential de-sync
- D. installed location file corruption
- E. browser compatibility issues
正解：B、C
解説：
Explanation
The System Health Dashboard in CyberArk provides a visual representation of the health status of different CyberArk components. When components are displayed as disconnected, the most common issues are network instabilities/outages and credential de-sync. Network issues can disrupt the connectivity between components and the Vault, while credential de-sync indicates that a component is no longer able to authenticate to the Vault due to synchronization problems with the credentials12. References:
* CyberArk Docs: Monitor system health1
* CyberArk Docs: System Health Dashboard details
質問 # 98
In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?
- A. True.
- B. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSM Connect.
- C. False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.
- D. False. Because the user can also enter credentials manually using Secure Connect.
正解：D
質問 # 99
In your organization the "click to connect" button is not active by default.
How can this feature be activated?
- A. Policies > Master Policy > Allow EPV transparent connections > Active
- B. Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception
- C. Policies > Master Policy > Allow EPV transparent connections > Inactive
- D. Policies > Master Policy > Password Management
正解：A
解説：
Explanation
The "click to connect" button is a feature that allows users to connect to target systems without entering their credentials manually. It is also known as EPV transparent connections or PSM transparent connections. To activate this feature, you need to enable the Allow EPV transparent connections parameter in the Master Policy. This parameter determines whether users can use the "click to connect" button to initiate a privileged session from the PVWA. If the parameter is set to Active, the button is enabled and users can connect to target systems with one click. If the parameter is set to Inactive, the button is disabled and users need to copy the credentials and paste them in the target system login screen. References: Connect and configure - CyberArk, How to enable/disable Connect button in PVWA console - force.com
質問 # 100
You want to create a new onboarding rule.
Where do you accomplish this?
- A. In PrivateArk, click Tools > Onboarding Rules
- B. In PVWA, click Options > Platform Management > Onboarding Rules
- C. In PVWA, click Reports > Unmanaged Accounts > Rules
- D. In PVWA, click Accounts > Onboarding Rules
正解：D
解説：
Explanation
To create a new onboarding rule, you accomplish this in the Privileged Vault Web Access (PVWA) by navigating to Accounts > Onboarding Rules. Once there, you can click on Create rule to start the New onboarding rule wizard and proceed with the configuration of the rule. This process allows you to set up rules that automatically onboard newly discovered accounts, minimizing manual effort and reducing the chance of human error1.
References:
* CyberArk Docs - Onboarding rules
質問 # 101
Match each automatic remediation to the correct PTA security event.
正解：
解説：
Explanation
* Add To Pending: Unmanaged privileged account
* Rotate Credentials: Suspected credential theft
* Reconcile Credentials: Suspicious password change
Comprehensive Explanation: In CyberArk's Privileged Threat Analytics (PTA), automatic remediations are actions that can be configured to respond to specific security events. For the event of an unmanaged privileged account, the remediation "Add To Pending" is used to add the account to the pending accounts queue. When there is a suspected credential theft, "Rotate Credentials" is the remediation that initiates a password change. Lastly, for a suspicious password change event, "Reconcile Credentials" is the remediation that ensures the credentials are correct and valid1.
References:
* CyberArk Docs: Configure security events
質問 # 102
A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request.
What is the correct location to identify users or groups who can approve?
- A. PVWA> Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers
- B. PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)
- C. PVWA> Administration > Platform Configuration > Edit Platform > UI & Workflow > Dual Control> Approvers
- D. PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests
正解：D
解説：
Explanation
In CyberArk's Privileged Access Management (PAM), the correct location to identify users or groups who can approve a dual-control request is within the Password Vault Web Access (PVWA). Specifically, you would navigate to the 'Policies' section, then to 'Access Control (Safes)', and within a safe, you would go to
'Safe Members'. Here, under the 'Workflow' tab, there is an option to 'Authorize Password Requests'. This is where the Vault Admin can identify which users or groups are authorized to approve requests for viewing passwords secured by dual-control.
References: The information is based on the best practices and guidelines provided in the CyberArk Defender PAM course and learning resources, which include the official CyberArk documentation and study guides.
質問 # 103
A Logon Account can be specified in the Master Policy.
- A. FALSE
- B. TRUE
正解：A
解説：
Explanation
A Logon Account cannot be specified in the Master Policy. The Master Policy is a set of rules that define the security and compliance policy of privileged accounts in the organization, such as access workflows, password management, session monitoring, and auditing1. The Master Policy does not include any technical settings that determine how the system manages accounts on various platforms1. A Logon Account is a technical setting that defines the account that the CPM uses to log on to a target system and perform password management tasks, such as changing, verifying, or reconciling passwords2. A Logon Account can be specified in the Platform Management settings, which are configured by the IT administrator for each platform2. The Platform Management settings are independent of the Master Policy and can be customized according to the organization's environment and security policies1. References:
* The Master Policy
* [Platform Management]
質問 # 104
What is required to enable access over SSH to a Unix account through both PSM and PSMP?
- A. PSM and PSMP must already have stored the SSH Fingerprint for the Unix host.
- B. A duplicate platform (Called) with the PSMP settings must be created.
- C. The 'Enable PSMP' setting in the Unix platform must be set to Yes.
- D. The platform must contain connection components for PSM-SSH and PSMP-SSH.
正解：D
質問 # 105
You are configuring CyberArk to use HTML5 gateways exclusively for PSM connections.
In the PVWA, where do you set DefaultConnectionMethod to HTML5?
- A. Options > Privileged Session Management Interface
- B. Options > Privileged Session Management Defaults
- C. Options > Privileged Session Management UI
- D. Options > Privileged Session Management
正解：C
解説：
Explanation
To configure CyberArk to use HTML5 gateways exclusively for PSM connections, you need to set the DefaultConnectionMethod to HTML5 in the PVWA. This is done by logging in to the PVWA with an administrative user, navigating to Options > Privileged Session Management UI, and setting the DefaultConnectionMethod to HTML51. This configuration ensures that HTML5 sessions are triggered only for PSM machines associated with the HTML5 Gateway1.
References:
* CyberArk Docs - Secure Access with an HTML5 Gateway1
質問 # 106
CyberArk recommends implementing object level access control on all Safes.
- A. False
- B. True
正解：A
質問 # 107
A logon account can be specified in the platform settings.
- A. False
- B. True
正解：B
質問 # 108
CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.
- A. TRUE
- B. FALSE
正解：A
質問 # 109
Match each PTA alert category with the PTA sensors that collect the data for it.
正解：
解説：
質問 # 110
You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.
How should this be configured to allow for password management using least privilege?
- A. Configure each CPM to use the correct reconcile account.
- B. Configure the UNIX platform to use the correct reconcile account.
- C. Configure each CPM to use the correct logon account.
- D. Configure the UNIX platform to use the correct logon account.
正解：D
質問 # 111
You received a notification from one of your CyberArk auditors that they are missing Vault level audit permissions. You confirmed that all auditors are missing the Audit Users Vault permission.
Where do you update this permission for all auditors?
- A. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Vault Authorizations
- B. PVWA> Administration > Configuration Options > LDAP integration > Vault Auditors Mapping > Vault Authorizations
- C. PVWA User Provisioning > LDAP integration > Vault Auditors Mapping > Vault Authorizations
- D. Private Ark Client > Tools > Administrative Tools > Users and Groups > Auditors > Authorizations tab
正解：D
質問 # 112
The primary purpose of exclusive accounts is to ensure non-repudiation (Individual accountability).
- A. TRUE
- B. FALSE
正解：A
解説：
Explanation
The primary purpose of exclusive accounts is to ensure non-repudiation (individual accountability). Exclusive accounts are accounts that can only be used by one user at a time, and are locked during usage. This means that no other user can access the same account until the current user releases it or the session expires. By using exclusive accounts, the organization can enforce individual accountability and traceability for the actions performed on the target systems. Exclusive accounts also reduce the risk of credential theft and unauthorized access, as the passwords are changed every time they are retrieved by a user1. Exclusive accounts can be configured in the Master Policy under the Password Management section, by enabling the Exclusive Access rule2. References:
* 1: The Master Policy, One Time Password subsection
* 2: The Master Policy, Exclusive Access subsection
質問 # 113
You created a new platform by duplicating the out-of-box Linux through the SSH platform.
Without any change, which Text Recorder Type(s) will the new platform support? (Choose two.)
- A. SSH Text Recorder
- B. Universal Keystrokes Text Recorder
- C. Events Text Recorder
- D. SQL Text Recorder
- E. Telnet Commands Text Recorder
正解：A、B
質問 # 114
......
試験エンジンはPAM-DEF試験無料お試しサンプル365日更新されます：https://jp.fast2test.com/PAM-DEF-premium-file.html
PAM-DEFのPDF問題とテストエンジンには240問があります：https://drive.google.com/open?id=1xTlfwia-URc2uCZOHvHrOHdBFXuFjUs7