CyberArk PAM-DEF Exam - Topic 1 Question 78 Discussion

Actual exam question for CyberArk's PAM-DEF exam

Question #: 78
Topic #: 1

[All PAM-DEF Questions]

Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

APassword change

BPassword reconciliation

CSession suspension

DSession termination

Show Suggested Answer

Suggested Answer: A

The PTA can perform automatic password change as a type of remediation in case of a suspected credential theft security event.According to the CyberArk documentation1, 'Rotate credentials - for OverPass the Hash attack and Suspected credentials theft events.'1This means that the PTA can initiate a password change request to the CPM for the affected account, which will generate a new random password and update it on the target system and the Vault. This way, the PTA can prevent the attacker from using the stolen credentials to access the target system or launch further attacks.Reference:

Configure PTA Remediations - CyberArk, section ''Remediation Initiation''

by Chantell at Jul 19, 2026, 03:57 PM

Limited Time Offer

25%

1 month ago

I think I remember that the PTA can change passwords automatically, so maybe it's A? But I'm not entirely sure.

upvoted 0 times

...