PAM-DEF Online Practice Questions

Home / CyberArk / PAM-DEF

Latest PAM-DEF Exam Practice Questions

The practice questions for PAM-DEF exam was last updated on 2025-06-03 .

Viewing page 1 out of 16 pages.

Viewing questions 1 out of 84 questions.

Question#1

What is the maximum number of levels of authorization you can set up in Dual Control?

A. 1
B. 2
C. 3
D. 4

Explanation:
Dual Control is a feature that allows you to set up a workflow for approving access requests to sensitive accounts. You can configure up to two levels of authorization for each account, meaning that you need up to two different authorizers to approve the request before the user can access the account. The authorizers can be either users or groups, and they can have different approval methods, such as email, SMS, or CyberArk interface.
Reference: [Defender PAM] course, Module 5: Privileged Session Management, Lesson 5.2: Dual Control [Defender PAM Sample Items Study Guide], Question 31 [CyberArk Documentation], Dual Control

Question#2

You created a new safe and need to ensure the user group cannot see the password, but can connect through the PSM.
Which safe permissions must you grant to the group? (Choose two.)

A. List Accounts Most Voted
B. Use Accounts Most Voted
C. Access Safe without Confirmation
D. Retrieve Files
E. Confirm Request

Explanation:
To ensure that a user group can connect through the Privileged Session Manager (PSM) without seeing the password, you must grant the Use Accounts and Retrieve Files permissions to the group for the safe. The Use Accounts permission allows users to initiate sessions using accounts without viewing the account details or passwords. The Retrieve Files permission enables users to retrieve files during PSM sessions without having access to the passwords1.
Reference: CyberArk Docs - Safe Permissions

Question#3

The password upload utility must run from the CPM server

A. TRUE
B. FALSE

Explanation:
According to the CyberArk documentation1, the Password Upload utility must run from the Central Policy Manager (CPM) server. This utility works by uploading passwords and their properties into the Password Vault from a pre-prepared file, creating the required environment, when necessary. It is run from a command line whenever a password upload is required1.

Question#4

DRAG DROP
A new HTML5 Gateway has been deployed in your organization.
From the PVWA, arrange the steps to configure a PSM host to use the HTML5 Gateway in the correct sequence.


A. 

Explanation:
To configure a PSM host to use the HTML5 Gateway from the PVWA, you would typically follow these steps:
Log into the PVWA with an administrative user.
Navigate to Administration > Options.
Right-click on Privileged Session Management and select Add Configured PSM Gateway Servers.
Right-click Configured PSM Gateway Servers, then Add PSM Gateway Server.
Select the newly added gateway server and enter a unique ID for the PSM HTML5 Gateway.
Expand the newly created gateway server and enter the necessary configuration details.
Please note that these steps are based on general procedures for configuring a PSM host with an HTML5 Gateway and should be verified against the official CyberArk documentation or by a qualified CyberArk professional. For detailed instructions and best practices, refer to the CyberArk documentation123.

Question#5

You want to give a newly-created group rights to review security events under the Security pane. You also want to be able to update the status of these events. Where must you update the group to allow this?

A. in the PTAAuthorizationGroups parameter, found in Administration > Options > PTA
B. in the PTAAuthorizationGroups parameter, found in Administration > Options > General
C. in the SecurityEventsAuthorizationGroups parameter, found in Administration > Security > Options
D. in the SecurityEventsFeedAuthorizationGroups parameter, found in Administration > Options > General

Explanation:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/Security-
Events.htm?TocPath=End%20User%7CSecurity%20Events%7C_____2#Permissions

Exam Code: PAM-DEFQ & A: 239 Q&AsUpdated:  2025-06-03

 Get All PAM-DEF Q&As