QUESTION 26
To ensure all sessions are being recorded, a CyberArk administrator goes to the master policy and makes configuration changes.
Which configuration is correct?

QUESTION 27
Platform settings are applied to _________.

QUESTION 28
What is the purpose of the CyberArk Event Notification Engine service?

QUESTION 29
How much disk space do you need on the server for a PAReplicate?

QUESTION 30
Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

QUESTION 31
You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.
How should this be configured to allow for password management using least privilege?

QUESTION 32
Which file is used to open up a non-standard firewall port to the Vault?

QUESTION 33
In a default CyberArk installation, which group must a user be a member of to view the “reports” page in PVWA?

QUESTION 34
VAULT authorizations may be granted to_____.

QUESTION 35
For a Safe with object level access control enabled the Vault administrator is able to turn off object level access control when it no longer needed on the Safe.

QUESTION 36
When working with the CyberArk High Availability Cluster, which services are running on the passive node?

QUESTION 37
Which of the following PTA detections are included in the Core PAS offering?

QUESTION 38
When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

QUESTION 39
When onboarding multiple accounts from the Pending Accounts list, which associated setting must be the same across the selected accounts?

QUESTION 40
Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?

QUESTION 41
In addition to disabling Windows services or features not needed for PVWA operations, which tasks does PVWA Hardening.ps1 perform when run?

QUESTION 42
The vault supports Subnet Based Access Control.

QUESTION 43
Which certificate type do you need to configure the vault for LDAP over SSL?

QUESTION 44
Which is the purpose of the interval setting in a Central Policy Manager (CPM) policy?

QUESTION 45
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)

QUESTION 46
The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.
How are these keys managed?