Question 1

Your organization has a requirement to allow users to œcheck out passwords and connect to targets with the same account through the PSM. What needs to be configured in the Master policy to ensure this will happen?

Options :

A :

Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active

B :

Enforce check-in/check-out exclusive access = inactive; Require privileged session monitoring and isolation = inactive

C : Enforce check-in/check-out exclusive access = inactive; Record and save session activity = active

D : Enforce check-in/check-out exclusive access = active; Record and save session activity = inactive

Answer: A

Question 2

Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?

Options :

A : Yes, when using the connect button, CyberArk uses the PMTerminal.exe process which bypasses the root SSH restriction.

B : Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.

C : Yes, if a logon account is associated with the root account.

D : No, it is not possible.

Answer: B

Question 3

There is a requirement for a password to change between 01:00 and 03:00 on Saturdays and Sundays; however, this does not work consistently. Which platform setting may be the cause?

Options :

A : The Interval setting for the platform is incorrect and must be less than 120.

B : The ImmediateInterval setting for the platform is incorrect and must be greater than or equal to 1.

C : The DaysToRun setting for the platform is incorrect and must be set to Sat,Sun

D : The HeadStartInterval setting for the platform is incorrect and must be set to 0.

Answer: C

Question 4

For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

Options :

A : Create an exception to the Master Policy to exclude the group from the workflow process.

B : Edith the master policy rule and modify the advanced’ Access safe without approval’ rule to include the group.

C : On the safe in which the account is stored grant the group the’ Access safe without audit’ authorization.

D : On the safe in which the account is stored grant the group the’ Access safe without confirmation’ authorization.

Answer: D

Question 5

What is the default username for the PSM for SSH maintenance user?

Options :

A : proxymng

B : psmpjnamtenance

C : psmpma/ntenanceuser

D : psmpmnguser

Answer: A