Question 1

Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp. When the client’s machine makes an RDP connection to the PSM server, which user will be utilized?

Options :

A : Credentials stored in the Vault for the target machine

B : Shadowuser

C : PSMConnect

D : PSMAdminConnect

Answer: C

Question 2

You are creating a new Rest API user that utilizes CyberArk Authentication.

What is a correct process to provision this user?

Options :

A : Private Ark Client > Tools > Administrative Tools > Users and Groups > New > User

B : Private Ark Client > Tools > Administrative Tools > Directory Mapping > Add

C : PVWA > User Provisioning > LDAP Integration > Add Mapping

D : PVWA > User Provisioning > Users and Groups > New > User

Answer: B

Question 3

As long as you are a member of the Vault Admins group you can grant any permission on any safe.

Options :

A : TRUE

B : FALSE

Answer: B

Question 4

For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval?

Options :

A : Create an exception to the Master Policy to exclude the group from the workflow process

B :

Edit the master policy rule and modify the advanced ‘Access safe without approval’ rule to include the group

C : On the safe in which the account is stored grant the group the ‘Access safe without audit’ authorization.

D :

On the safe in which the account is stored grant the group the ‘Access safe without confirmation’ authorization.

Answer: A

Question 5

What is the purpose of a linked account?

Options :

A : To ensure that a particular collection of accounts all have the same password

B : To ensure a particular set of accounts all change at the same time.

C : To connect the CPNI to a target system

D : To allow more than one account to work together as part of a password management process.

Answer: D