exam questions

Exam PAM-DEF All Questions

View all questions & answers for the PAM-DEF exam

Exam PAM-DEF topic 1 question 10 discussion

Actual exam question from CyberArk's PAM-DEF
Question #: 10
Topic #: 1
[All PAM-DEF Questions]

You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.
How can this be configured to allow for password management using least privilege?

  • A. Configure each CPM to use the correct logon account.
  • B. Configure each CPM to use the correct reconcile account.
  • C. Configure the UNIX platform to use the correct logon account.
  • D. Configure the UNIX platform to use the correct reconcile account.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
cf57f90
1 month, 2 weeks ago
Selected Answer: C
The Answer is: C
upvoted 1 times
...
Imdroc
2 months, 3 weeks ago
Selected Answer: C
The Answer is: C
upvoted 1 times
...
diogofreire
7 months ago
Selected Answer: C
Deve ser inserido a conta de logon na conta/plataforma da conta root
upvoted 2 times
...
ThomasKong
7 months, 1 week ago
it always a best practices from CyberArk Vendor or Principle. When cannot direct login with Using Root or others high privilege ID Logon Account/ID will be the secondary login ID, then only others ID can login.
upvoted 2 times
...
Azie80
1 year ago
Selected Answer: D
The question mentioned password management. Its a tricked question..
upvoted 2 times
...
miky_Cissp
1 year, 1 month ago
C. Configure the UNIX platform to use the correct logon account is the correct answer. This is because the logon account is the secondary account that the CPM uses to first log into the UNIX system before switching to the root account for password management. The logon account provides the CPM with the necessary permissions to manage the root account's password without having direct root access.
upvoted 3 times
...
brossva
1 year, 5 months ago
Selected Answer: C
C is correct
upvoted 2 times
...
Swaminathanm
1 year, 5 months ago
Selected Answer: C
Configure the UNIX platform to use the correct logon account.
upvoted 1 times
...
penuelaandy
1 year, 9 months ago
Selected Answer: C
The logon account can be defined on the target account level or on the platform level, making it available to all accounts associated with the platform. Note: Logon accounts can also be defined for PSM and PSM for SSH connections. In this case, they can be retrieved from the account level only. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.0/en/Content/PASIMP/Linked-PAS-Accounts.htm#Overview
upvoted 3 times
...
jafyyy
1 year, 9 months ago
C is the correct answer. must be logon account for UNIX.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...