Free CyberArk PAM-DEF Exam Dumps Questions & Answers

Which service should NOT be running on the DR Vault when the primary Production Vault is up?

• A.PrivateArk Server
• B.CyberArk Vault Disaster Recovery (DR) service
• C.PrivateArk Database
• D.CyberArk Logical Container

Which combination of Safe member permissions will allow end users to log in to a remote machine transparently but NOT show or copy the password?

• A.List Accounts, Retrieve Accounts
• B.Use Accounts, Retrieve Accounts, List Accounts
• C.Use Accounts, List Accounts
• D.Use Accounts

For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

Correct Answer:

Explanation

According to the CyberArk documentation1, the prerequisites for running the PSM Health Check are:
* PSM service installed on Windows 2016 or Windows 2019
* Web Server (IIS 8.5) role is installed
* A valid SSL certificate is installed on the Web Server
Therefore, these prerequisites are mandatory for the PSM Health Check to work properly. The PSM service installed on Windows 2008 R2 is not mandatory, as it is not supported by the PSM Health Check2.
References: PSM Health Check, PSM Health Check - CyberArk

You have been asked to turn off the time access restrictions for a safe.
Where is this setting found?

• A.Vault
• B.PrivateArk Client
• C.PVWA
• D.RestAPI

It is possible to control the hours of the day during which a user may log into the vault.

• A.FALSE
• B.TRUE