Exam PAM-DEF topic 1 question 37 discussion

Actual exam question from CyberArk's PAM-DEF

Question #: 37
Topic #: 1

A password compliance audit found:
1) One-time password access of 20 domain accounts that are members of Domain Admins group in Active Directory are not being enforced.
2) All the sessions of connecting to domain controllers are not being recorded by CyberArk PSM.
What should you do to address these findings?

A. Edit the Master Policy and add two policy exceptions: enable "Enforce one-time password access", enable "Record and save session activity".
B. Edit safe properties and add two policy exceptions: enable "Enforce one-time password access", enable "Record and save session activity".
C. Edit CPM Settings and add two policy exceptions: enable "Enforce one-time password access", enable "Record and save session activity".
D. Contact the Windows Administrators and request them to add two policy exceptions at Active Directory Level: enable "Enforce one-time password access", enable "Record and save session activity".

Show Suggested Answer

Suggested Answer: A 🗳️

by penuelaandy at March 3, 2023, 6:50 p.m.

Comments

Submit Cancel

f0f4e87

4 days, 1 hour ago

Selected Answer: A

These are all set under the Master Policy.

upvoted 1 times

...

Mattia8

9 months, 2 weeks ago

Selected Answer: A

Absolutely A

upvoted 2 times

...

Imdroc

9 months, 3 weeks ago

Selected Answer: A

Answer is: A

upvoted 2 times

...

brossva

2 years ago

A is correct

upvoted 4 times

...

penuelaandy

2 years, 3 months ago

Selected Answer: A

https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.0/en/Content/PASIMP/Working-with-Master-Policy-Rules.htm?tocpath=Administrator%7CPrivileged%20Accounts%7CSecurity%20Policy%7C_____2#MasterPolicyrules

upvoted 3 times

...