Join the discussion
Question 109/203
VAULT authorizations may be granted to_____.
Correct Answer: A,C
Explanation
Vault Authorizations
* Can be assigned only to users (not groups).
* Cannot be inherited via group membership.
* Defined only via the Private Ark Client.
Safe Auth
* Assigned to users and/or groups.
* Can be inherited via group membership.
* Can be defined in the Private Ark Client or PVWA
Vault Authorizations
* Can be assigned only to users (not groups).
* Cannot be inherited via group membership.
* Defined only via the Private Ark Client.
Safe Auth
* Assigned to users and/or groups.
* Can be inherited via group membership.
* Can be defined in the Private Ark Client or PVWA
Add Comments
- Other Question (203q)
- Q1. DRAG DROP Match each key to its recommended storage location. (Exhibit)...
- Q2. A newly created platform allows users to access a Linux endpoint. When users click to conn...
- Q3. PTA can automatically suspend sessions if suspicious activities are detected in a privileg...
- Q4. What is the purpose of the PrivateArk Database service?...
- Q5. Due to corporate storage constraints, you have been asked to disable session monitoring an...
- Q6. One can create exceptions to the Master Policy based on ____________________....
- Q7. Which option in the Private Ark client is used to update users' Vault group memberships?...
- Q8. You receive this error: "Error in changepass to user domain\user on domain server(\domain....
- Q9. Which keys are required to be present in order to start the PrivateArk Server service?...
- Q10. To change the safe where recordings are kept for a specific platform, which setting must y...
- Q11. To ensure all sessions are being recorded, a CyberArk administrator goes to the master pol...
- Q12. The Vault administrator can change the Vault license by uploading the new license to the s...
- Q13. Which statement is correct concerning accounts that are discovered, but cannot be added to...
- Q14. You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the...
- Q15. In the Private Ark client, how do you add an LDAP group to a CyberArk group?...
- Q16. A new domain controller has been added to your domain. You need to ensure the CyberArk inf...
- Q17. What is the purpose of the Immediate Interval setting in a CPM policy?...
- Q18. What does the Export Vault Data (EVD) utility do?...
- Q19. You have been asked to create an account group and assign three accounts which belong to a...
- Q20. DRAG DROP Match the connection component to the corresponding OS/Function. (Exhibit)...
- Q21. Which keys are required to be present in order to start the PrivateArk Server service?...
- Q22. You need to enable the PSM for all platforms. Where do you perform this task?...
- Q23. Which of the following logs contains information about errors related to PTA?...
- Q24. Users are unable to launch Web Type Connection components from the PSM server. Your manage...
- Q25. You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe T...
- Q26. The primary purpose of exclusive accounts is to ensure non-repudiation (Individual account...
- Q27. In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX sys...
- Q28. What does the minvalidity parameter on a platform policy determine?...
- Q29. To change the safe where recordings are kept for a specific platform, which setting must y...
- Q30. According to CyberArk, which issues most commonly cause installed components to display as...
- Q31. In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX sys...
- Q32. DRAG DROP Match each component to its respective Log File location. (Exhibit)...
- Q33. What is the purpose of the password change process?...
- Q34. Which statement is correct concerning accounts that are discovered, but cannot be added to...
- Q35. A user has successfully conducted a short PSM session and logged off. However, the user ca...
- Q36. Before failing back to the production infrastructure after a DR exercise, what must you do...
- Q37. tsparm.ini is the main configuration file for the Vault....
- Q38. Users are unable to launch Web Type Connection components from the PSM server. Your manage...
- Q39. When onboarding multiple accounts from the Pending Accounts list, which associated setting...
- Q40. Which one the following reports is NOT generated by using the PVWA?...
- Q41. What is the name of the Platform parameters that controls how long a password will stay va...
- Q42. dbparm.ini is the main configuration file for the Vault....
- Q43. You are onboarding an account that is not supported out of the box. What should you do fir...
- Q44. Users who have the 'Access Safe without confirmation' safe permission on a safe where acco...
- Q45. Which change could CyberArk make to the REST API that could cause existing scripts to fail...
- Q46. You are concerned about the Windows Domain password changes occurring during business hour...
- Q47. You have been asked to turn off the time access restrictions for a safe. Where is this set...
- Q48. The Accounts Feed contains:
- Q49. If a user is a member of more than one group that has authorizations on a safe, by default...
- Q50. Which Vault authorization does a user need to have assigned to able to generate the "Entit...
- Q51. Where can reconcile and/or logon accounts be linked to an account? (Choose two.)...
- Q52. Which Vault authorization does a user need to have assigned to able to generate the "Entit...
- Q53. For Digital Vault Cluster in a high availability configuration, how does the cluster deter...
- Q54. You have been asked to identify the up or down status of Vault services. Which CyberArk ut...
- Q55. You are creating a Dual Control workflow for a team's safe. Which safe permissions must yo...
- Q56. What do you need on the Vault to support LDAP over SSL?...
- Q57. Users can be resulted to using certain CyberArk interfaces (e.g.PVWA or PACLI)....
- Q58. Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linu...
- Q59. You are onboarding an account that is not supported out of the box. What should you do fir...
- Q60. How much disk space do you need on the server for a PAReplicate?...
- Q61. Match each PTA alert category with the PTA sensors that collect the data for it. (Exhibit)...
- Q62. You are logging into CyberArk as the Master user to recover an orphaned safe. Which items ...
- Q63. An auditor needs to login to the PSM in order to live monitor an active session . Which us...
- Q64. Match the built-in Vault User with the correct definition. (Exhibit)...
- Q65. You are creating a shared safe for the help desk. What must be considered regarding the na...
- Q66. tsparm.ini is the main configuration file for the Vault....
- Q67. It is possible to leverage DNA to provide discovery functions that are not available with ...
- Q68. A user with administrative privileges to the vault can only grant other users privileges t...
- Q69. What is the correct process to install a custom platform from the CyberArk Marketplace?...
- Q70. When onboarding multiple accounts from the Pending Accounts list, which associated setting...
- Q71. Users are unable to launch Web Type Connection components from the PSM server. Your manage...
- Q72. Which built-in report from the reports page in PVWA displays the number of days until a pa...
- Q73. To ensure all sessions are being recorded, a CyberArk administrator goes to the master pol...
- Q74. Which utilities could you use to change debugging levels on the vault without having to re...
- Q75. Which of the following logs contains information about errors related to PTA?...
- Q76. Which permissions are needed for the Active Directory user required by the Windows Discove...
- Q77. You have been asked to turn off the time access restrictions for a safe. Where is this set...
- Q78. Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system ...
- Q79. According to the DEFAULT Web Options settings, which group grants access to the REPORTS pa...
- Q80. A user is receiving the error message "ITATS006E Station is suspended for User jsmith" whe...
- Q81. Platform settings are applied to _________.
- Q82. To manage automated onboarding rules, a CyberArk user must be a member of which group?...
- Q83. You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the...
- Q84. Which one the following reports is NOT generated by using the PVWA?...
- Q85. SAFE Authorizations may be granted to____________. Select all that apply....
- Q86. You receive this error: "Error in changepass to user domain\user on domain server(\domain....
- Q87. You need to enable the PSM for all platforms. Where do you perform this task?...
- Q88. Which change could CyberArk make to the REST API that could cause existing scripts to fail...
- Q89. DRAG DROP Match the built-in Vault User with the correct definition. (Exhibit)...
- Q90. Which Master Policy Setting must be active in order to have an account checked-out by one ...
- Q91. Which file must be edited on the Vault to configure it to send data to PTA?...
- Q92. What is the purpose of the Immediate Interval setting in a CPM policy?...
- Q93. If a password is changed manually on a server, bypassing the CPM, how would you configure ...
- Q94. It is possible to restrict the time of day, or day of week that a [b]verify[/b] process ca...
- Q95. Which of the following files must be created or configured m order to run Password Upload ...
- Q96. Arrange the steps to restore a Vault using PARestore for a Backup in the correct sequence....
- Q97. Assuming a safe has been configured to be accessible during certain hours of the day, a Va...
- Q98. Which report shows the accounts that are accessible to each user?...
- Q99. When the CPM connects to a database, which interface is most commonly used?...
- Q100. PSM captures a record of each command that was executed in Unix....
- Q101. What is the purpose of the Interval setting in a CPM policy?...
- Q102. You want to build a connector that connects to a website through the Web applications for ...
- Q103. In your organization the "click to connect" button is not active by default. How can this ...
- Q104. How does the Vault administrator apply a new license file?...
- Q105. To manage automated onboarding rules, a CyberArk user must be a member of which group?...
- Q106. Which file must be edited on the Vault to configure it to send data to PTA?...
- Q107. Where can PTA be configured to send alerts? (Choose two.)...
- Q108. Time of day or day of week restrictions on when password verifications can occur configure...
- Q109. VAULT authorizations may be granted to_____.
- Q110. An auditor initiates a live monitoring session to PSM server to view an ongoing live sessi...
- Q111. Match the built-in Vault User with the correct definition. (Exhibit)...
- Q112. VAULT authorizations may be granted to_____.
- Q113. Which of the following Privileged Session Management (PSM) solutions support live monitori...
- Q114. Which dependent accounts does the CPM support out-of-the-box? (Choose three.)...
- Q115. In PVWA, you are attempting to play a recording made of a session by user jsmith, but ther...
- Q116. Your organization has a requirement to allow users to "check out passwords" and connect to...
- Q117. Within the Vault each password is encrypted by:...
- Q118. Which dependent accounts does the CPM support out-of-the-box? (Choose three.)...
- Q119. An auditor needs to login to the PSM in order to live monitor an active session. Which use...
- Q120. The Password upload utility can be used to create safes....
- Q121. When on-boarding account using Accounts Feed, Which of the following is true?...
- Q122. How much disk space do you need on a server to run a full replication with PAReplicate?...
- Q123. Which of these accounts onboarding methods is considered proactive?...
- Q124. In order to connect to a target device through PSM, the account credentials used for the c...
- Q125. The vault supports Role Based Access Control.
- Q126. You are creating a shared safe for the help desk. What must be considered regarding the na...
- Q127. What can you do to ensure each component server is operational?...
- Q128. You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe T...
- Q129. A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activi...
- Q130. Which of the following statements are NOT true when enabling PSM recording for a target Wi...
- Q131. ADR Vault became active due to a failure of the primary Vault. Service on the primary Vaul...
- Q132. Your organization has a requirement to allow users to "check out passwords" and connect to...
- Q133. You have been asked to delegate the rights to unlock users to Tier 1 support. The Tier 1 s...
- Q134. Where can you assign a Reconcile account? (Choose two.)...
- Q135. All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled f...
- Q136. Assuming a safe has been configured to be accessible during certain hours of the day, a Va...
- Q137. Due to corporate storage constraints, you have been asked to disable session monitoring an...
- Q138. In order to connect to a target device through PSM, the account credentials used for the c...
- Q139. During a High Availability node switch you notice an error and the Cluster Vault Manager U...
- Q140. Match the connection component to the corresponding OS/Function. (Exhibit)...
- Q141. Which statement about the Master Policy best describes the differences between one-time pa...
- Q142. The vault supports Role Based Access Control.
- Q143. Which of the following PTA detections require the deployment of a Network Sensor or instal...
- Q144. Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that a...
- Q145. To use PSM connections while in the PVWA, what are the minimum safe permissions a user or ...
- Q146. Which usage can be added as a service account platform?...
- Q147. Which onboarding method would you use to integrate CyberArk with your accounts provisionin...
- Q148. A user is receiving the error message "ITATS006E Station is suspended for User jsmith" whe...
- Q149. Which of the following statements are NOT true when enabling PSM recording for a target Wi...
- Q150. When managing SSH keys, the CPM stored the Private Key...
- Q151. Which type of automatic remediation can be performed by the PTA in case of a suspected cre...
- Q152. Which report could show all accounts that are past their expiration dates?...
- Q153. As long as you are a member of the Vault Admins group you can grant any permission on any ...
- Q154. Which of the following statements are NOT true when enabling PSM recording for a target Wi...
- Q155. Platform settings are applied to _________.
- Q156. It is possible to control the hours of the day during which a user may log into the vault....
- Q157. When running a "Privileged Accounts Inventory" Report through the Reports page in PVWA on ...
- Q158. Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that nee...
- Q159. Select the best practice for storing the Master CD....
- Q160. Match each permission to where it can be found. (Exhibit)...
- Q161. Match each component to its respective Log File location. (Exhibit)...
- Q162. To use PSM connections while in the PVWA, what are the minimum safe permissions a user or ...
- Q163. You are configuring CyberArk to use HTML5 gateways exclusively for PSM connections. In the...
- Q164. A logon account can be specified in the platform settings....
- Q165. When managing SSH keys, the CPM stored the Private Key...
- Q166. In addition to add accounts and update account contents, which additional permission on th...
- Q167. Which of the Following can be configured in the Master Poky? Choose all that apply....
- Q168. You have been given the requirement that certain accounts cannot have their passwords upda...
- Q169. To enable the Automatic response "Add to Pending" within PTA when unmanaged credentials ar...
- Q170. What is the maximum number of levels of authorization you can set up in Dual Control?...
- Q171. As long as you are a member of the Vault Admins group, you can grant any permission on any...
- Q172. In the Private Ark client, how do you add an LDAP group to a CyberArk group?...
- Q173. The Active Directory User configured for Windows Discovery needs which permission(s) or me...
- Q174. To use PSM connections while in the PVWA, what are the minimum safe permissions a user or ...
- Q175. For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM ...
- Q176. What is required to manage loosely connected devices?...
- Q177. If the AccountUploader Utility is used to create accounts with SSH keys, which parameter d...
- Q178. Where can you assign a Reconcile account? (Choose two.)...
- Q179. In the screenshot displayed, you just configured the usage in CyberArk and want to update ...
- Q180. A user has successfully conducted a short PSM session and logged off. However, the user ca...
- Q181. When should vault keys be rotated?
- Q182. What is the correct process to install a custom platform from the CyberArk Marketplace?...
- Q183. Which statement is true about setting the reconcile account at the platform level?...
- Q184. For an account attached to a platform that requires Dual Control based on a Master Policy ...
- Q185. What is the purpose of the password change process?...
- Q186. As long as you are a member of the Vault Admins group, you can grant any permission on any...
- Q187. Which is the primary purpose of exclusive accounts?...
- Q188. Match each permission to where it can be found. (Exhibit)...
- Q189. You need to enable the PSM for all platforms. Where do you perform this task?...
- Q190. A logon account can be specified in the platform settings....
- Q191. Which service should NOT be running on the DR Vault when the primary Production Vault is u...
- Q192. The vault supports Subnet Based Access Control....
- Q193. Which user is automatically added to all Safes and cannot be removed?...
- Q194. DRAG DROP Arrange the steps to restore a Vault using PARestore for a Backup in the correct...
- Q195. Arrange the steps to restore a Vault using PARestore for a Backup in the correct sequence....
- Q196. Match the Status of Service on a DR Vault to what is displayed when it is operating normal...
- Q197. When should vault keys be rotated?
- Q198. Which statement about the Master Policy best describes the differences between one-time pa...
- Q199. You receive this error: "Error in changepass to user domain\user on domain server(\domain....
- Q200. What is the purpose of the password change process?...
- Q201. What is the chief benefit of PSM?
- Q202. Target account platforms can be restricted to accounts that are stored m specific Safes us...
- Q203. You are configuring a Vault HA cluster. Which file should you check to confirm the correct...
