Discuss CyberArk PAM-DEF Exam Topic 3 Question 67

You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account's password the CPM will.....

ALog in to the system as root, then change root's password

BLog in to the system as the logon account, then change roofs password

CLog in to the system as the logon account, run the su command to log in as root, and then change root's password.

DNone of these

Suggested Answer: C

When attempting to change the root account's password, the CPM will log in to the system as the logon account, run the su command to log in as root, and then change root's password. This is because the logon account is used to initiate sessions to machines that do not permit direct logon, such as Unix systems that restrict root access. When a logon account is associated with a privileged account, it will be used to log onto the remote machine and then elevate itself to the role of the privileged user. As different types of machines might have different logon prompts or elevation commands, the CPM can use the AutoLogonSequenceWithLogonAccount parameter to define the logon process and the elevation to the privileged account. This parameter contains regular expression prompts and responses that define the logon process and subsequent activities.The regular expressions can include dynamic values that the CPM reads from the account properties, user parameters, or client-specific parameters1. For example, the following is a possible AutoLogonSequenceWithLogonAccount parameter for a Unix platform:

This parameter instructs the CPM to log in to the system as the logon account, enter the logon password, run the su - command to switch to the root user, enter the logon password again, run the change command to change the root password, exit the root session, and exit the logon session1.

The other options are not correct, as follows:

A . Log in to the system as root, then change root's password. This option is not possible, because the root account cannot be used for direct logon.The logon account is associated with the root account to enable the CPM to access the system and change the password1.

B . Log in to the system as the logon account, then change root's password. This option is not effective, because the logon account does not have the permission to change the root's password.The logon account needs to elevate itself to the root user by using the su command before changing the password1.

D . None of these. This option is not valid, because there is a correct answer among the choices.

1:Logon Accounts for SSH and Telnet Connections

Get Premium PAM-DEF Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

30 comments · newest first

Scarlet 6 months ago

I’m leaning towards D. What if none of these fit the scenario?

Valentin 6 months ago

Definitely C! It follows the right protocol for changing passwords.

Mirta 6 months ago

I feel option B is too simple. We need to elevate privileges properly.

Vanda 6 months ago

Option A seems risky. Directly logging in as root isn't safe.

Douglass 7 months ago

Agreed! Using 'su' is essential for security.

Melinda 7 months ago

I think option C is the best choice. It’s the proper way to switch users.

Kallie 7 months ago

I'm not sure, but D sounds plausible too.

Bette 8 months ago

I agree with C, that's the standard way to do it.

Brett 8 months ago

Wait, can you really change root's password like that?

Vi 8 months ago

Definitely A, just log in as root directly.

Paulina 8 months ago

I think it's C, you need to use su to switch to root.

Frederic 8 months ago

Wait, we have a "root" account? I thought we were just supposed to use "admin" for everything.

Minna 8 months ago

Ah, the age-old question of how to change the root password. I feel like I've answered this one a hundred times before.

Alyce 9 months ago

I always get confused between B and C. Why can't they just make these exams more straightforward?

Franklyn 9 months ago

I'm a bit confused about this one. I thought changing the root password directly as root was the way to go, which makes me lean towards option A.

Devorah 9 months ago

I remember practicing a similar question, and I feel like using the su command is important here. So, option C might be correct.

Arlie 9 months ago

I think the CPM would need to log in as the logon account first, so maybe it's option B? But I'm not entirely sure.

Juliana 9 months ago

I'm leaning towards C as well. The key is that we need to log in as the logon account first, and then use su to switch to root before making the password change.

Evette 10 months ago

I'm pretty sure the answer is C. The question is asking about changing the root password, so we'd need to log in as the logon account and then escalate privileges to root using su.

Garry 10 months ago

Okay, let me walk through this step-by-step. I think C is the correct answer, since we need to log in as the logon account and then use su to switch to root before changing the password.

Alberta 10 months ago

C is the correct answer. You need to log in as the logon account, then use the su command to switch to the root user and change the password.

Martina 10 months ago

I don't recall the exact details, but I feel like none of these options fully capture how the CPM operates. Could it be D?

Jaime 11 months ago

D. None of these. I'm just going to guess and hope for the best.

Desire 11 months ago

Hmm, this seems tricky. I'll need to think through the steps carefully to figure out the right approach.

Claudia 11 months ago

I'm not totally sure about this one. I think it might be C, but I'm not confident.

Phillip 5 months ago

↳ replying to Claudia

I’m with you, C feels like the best option here.

Audrie 5 months ago

↳ replying to Claudia

I think D could be the answer. None of them fit perfectly.

Ruby 6 months ago

↳ replying to Claudia

C makes sense, but A is also a possibility.

Devon 6 months ago

↳ replying to Claudia

I’m leaning towards A. It sounds straightforward.

Tegan 10 months ago

↳ replying to Claudia

I agree, C seems like the right choice.

CyberArk PAM-DEF Exam - Topic 3 Question 67 Discussion