CyberArk PAM-DEF 問題集

質問 1：
PSM captures a record of each command that was executed in Unix.
A. FALSE
B. TRIE
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?
A. They cannot be onboarded to the Password Vault.
B. They are added to the Pending Accounts list and can be reviewed and manually uploaded.
C. They must be uploaded using third party tools.
D. They are not part of the Discovery Process.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which accounts can be selected for use in the Windows discovery process? (Choose two.)
A. the PasswordManager user
B. the Vault Administrator
C. an account stored in the Vault
D. any user with Auditor membership
E. an account specified by the user
正解：C,E
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which authorizations are required in a recording safe to allow a group to view recordings?

正解：

Explanation
* Retrieve accounts/files: Required
* List accounts/files: Required
* View audit: Required
* Access Safe without confirmation: Not Required
* Create Folders: Not Required
Comprehensive Explanation: To allow a group to view recordings in a recording safe, the required authorizations are Retrieve accounts/files, List accounts/files, and View audit. These authorizations enable the group members to access and view the session recordings stored within the safe. The Retrieve accounts/files permission allows users to retrieve files during PSM sessions. The List accounts/files permission enables users to see the list of accounts and files within the safe. The View audit authorization is necessary for users to view the audit records associated with the recordings1.
References:
* CyberArk Docs - Monitor Privileged Sessions

質問 5：
For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

正解：

Explanation

According to the CyberArk documentation1, the prerequisites for running the PSM Health Check are:
* PSM service installed on Windows 2016 or Windows 2019
* Web Server (IIS 8.5) role is installed
* A valid SSL certificate is installed on the Web Server
Therefore, these prerequisites are mandatory for the PSM Health Check to work properly. The PSM service installed on Windows 2008 R2 is not mandatory, as it is not supported by the PSM Health Check2.
References: PSM Health Check, PSM Health Check - CyberArk

質問 6：
If a user is a member of more than one group that has authorizations on a safe, by default that user is granted________.
A. the cumulative permissions of all groups to which that user belongs.
B. only those permissions that exist in all groups to which the user belongs.
C. the vault will not allow this situation to occur.
D. only those permissions that exist on the group added to the safe first.
正解：A
解説: (Topexam メンバーにのみ表示されます)