Discuss CyberArk PAM-DEF Exam Topic 1 Question 78

Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

APassword change

BPassword reconciliation

CSession suspension

DSession termination

Suggested Answer: A

The PTA can perform automatic password change as a type of remediation in case of a suspected credential theft security event.According to the CyberArk documentation1, 'Rotate credentials - for OverPass the Hash attack and Suspected credentials theft events.'1This means that the PTA can initiate a password change request to the CPM for the affected account, which will generate a new random password and update it on the target system and the Vault. This way, the PTA can prevent the attacker from using the stolen credentials to access the target system or launch further attacks.Reference:

Configure PTA Remediations - CyberArk, section ''Remediation Initiation''

Get Premium PAM-DEF Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Reena 1 month ago

Password change seems safer, but it might not stop ongoing attacks.

Kyoko 1 month ago

I agree, session suspension could be too lenient.

Trina 1 month ago

I think session termination is the best option.

Ilda 2 months ago

D) Session termination is a must in those cases!

Micaela 2 months ago

I disagree, B) Password reconciliation seems less effective.

Dwight 2 months ago

Wait, can they really do that? Sounds too good to be true!

Candra 2 months ago

I think C) Session suspension is also a good option.

Daron 2 months ago

Definitely A) Password change!

Corinne 2 months ago

I’m leaning towards B, password reconciliation, but I’m not confident. It just sounds familiar from my notes.

Christiane 3 months ago

I practiced a question similar to this, and I think session suspension was mentioned as a possible remediation. Could it be C?

Tegan 3 months ago

I feel like session termination could be a valid option too, but I can't recall if that's specifically for credential theft.

Jamie 3 months ago

I think I remember that the PTA can change passwords automatically, so maybe it's A? But I'm not entirely sure.

CyberArk PAM-DEF Exam - Topic 1 Question 78 Discussion