Exam PAM-DEF topic 1 question 37 discussion

Actual exam question from CyberArk's PAM-DEF

Question #: 37
Topic #: 1

A password compliance audit found:
1) One-time password access of 20 domain accounts that are members of Domain Admins group in Active Directory are not being enforced.
2) All the sessions of connecting to domain controllers are not being recorded by CyberArk PSM.
What should you do to address these findings?

A. Edit the Master Policy and add two policy exceptions: enable "Enforce one-time password access", enable "Record and save session activity".
B. Edit safe properties and add two policy exceptions: enable "Enforce one-time password access", enable "Record and save session activity".
C. Edit CPM Settings and add two policy exceptions: enable "Enforce one-time password access", enable "Record and save session activity".
D. Contact the Windows Administrators and request them to add two policy exceptions at Active Directory Level: enable "Enforce one-time password access", enable "Record and save session activity".

Show Suggested Answer

Suggested Answer: A 🗳️

by penuelaandy at March 3, 2023, 6:50 p.m.

Comments

Submit Cancel

f0f4e87

1 month, 2 weeks ago

Selected Answer: A

These are all set under the Master Policy.

upvoted 1 times

...

Mattia8

11 months ago

Selected Answer: A

Absolutely A

upvoted 2 times

...

Imdroc

11 months, 1 week ago

Selected Answer: A

Answer is: A

upvoted 2 times

...

brossva

2 years, 2 months ago

A is correct

upvoted 4 times

...

penuelaandy

2 years, 5 months ago

Selected Answer: A

https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.0/en/Content/PASIMP/Working-with-Master-Policy-Rules.htm?tocpath=Administrator%7CPrivileged%20Accounts%7CSecurity%20Policy%7C_____2#MasterPolicyrules

upvoted 3 times

...