CyberArk PAM-DEF 問題集

質問 1：
You have been asked to delegate the rights to unlock users to Tier 1 support. The Tier 1 support team already has an LDAP group for its members.
Arrange the steps to do this in the correct sequence.

正解：

Explanation
The correct sequence to delegate the rights to unlock users to Tier 1 support with an existing LDAP group is as follows:
* Sign into the PWA (V10) as a local user with the "Manage Directory Mapping" privilege.
* Open LDAP Integration view.
* Add Mapping to the existing LDAP integration.
* Name the new mapping and set the mapping order.
* Select required LDAP group and assign authorization "Activate Users".
Comprehensive Explanation: To delegate the rights to unlock users, you must first access the Privileged Web Access (PWA) with the appropriate privileges to manage directory mappings. Then, navigate to the LDAP Integration view to add a new mapping to the existing LDAP integration. This mapping should be named and ordered correctly. Finally, select the LDAP group that represents Tier 1 support and assign the specific authorization needed to unlock users, which is "Activate Users" in this context12.
References:
* CyberArk Docs: LDAP Integration in V102
* CyberArk Knowledge Article: How to delegate permissions to unlock Active Directory accounts1

質問 2：
In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?
A. False. Because the user can also enter credentials manually using Secure Connect.
B. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSM Connect.
C. False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.
D. True.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
One can create exceptions to the Master Policy based on ____________________.
A. Safes
B. Policies
C. Accounts
D. Platforms
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
When should vault keys be rotated?
A. when it is copied to file systems outside the vault
B. when migrating to a new data center
C. annually
D. whenever a CyberArk user leaves the organization
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Due to network activity, ACME Corp's PrivateArk Server became active on the OR Vault while the Primary Vault was also running normally. All the components continued to point to the Primary Vault.
Which steps should you perform to restore DR replication to normal?
A. Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
B. Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
C. Shutdown PrivateArk Server on DR Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
D. Shutdown PrivateArk Server on Primary Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which processes reduce the risk of credential theft? (Choose two.)
A. enforce one-time password access
B. require password change every X days
C. require dual control password access approval
D. enforce check-in/check-out exclusive access
正解：A,B