Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CyberArk PAM-DEF Exam - Topic 4 Question 74 Discussion

Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?
B) Enforce check-in/check-out exclusive access
A) Require dual control password access Approval
C) Enforce one-time password access
D) Enforce check-in/check-out exclusive access & enforce one-time password access

CyberArk PAM-DEF Exam - Topic 4 Question 74 Discussion

Actual exam question for CyberArk's PAM-DEF exam
Question #: 74
Topic #: 4
[All PAM-DEF Questions]

Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

Show Suggested Answer Hide Answer
Suggested Answer: B

According to the CyberArk Defender PAM documentation, the Master Policy setting that must be active in order to have an account checked-out by one user for a pre-determined amount of time is Enforce check-in/check-out exclusive access. This setting enables organizations to permit users to check out a 'one-time' password and lock it so that no other users can retrieve it at the same time. After the user has used the password, the user checks the password back into the Vault. This ensures exclusive usage of the privileged account, enabling full control and tracking for the password. The duration of the check-out period can be configured in the platform settings for each account.Reference:

Account check-out and check-in - CyberArk

Master Policy - CyberArk


by Tiara at May 17, 2026, 02:33 PM

Limited Time Offer

25%

Off

Get Premium PAM-DEF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Galen
3 days ago
B is the right answer for exclusive access.
upvoted 0 times
...
Hyun
9 days ago
Definitely B, it’s all about that check-in/check-out!
upvoted 0 times
...
Janessa
14 days ago
I thought one-time passwords were enough on their own.
upvoted 0 times
...
Ricarda
19 days ago
Wait, are you sure it’s not D? Sounds like both are needed.
upvoted 0 times
...
Colette
24 days ago
Totally agree, B makes sense!
upvoted 0 times
...
Simona
29 days ago
B is the right answer for exclusive access.
upvoted 0 times
...
German
1 month ago
I vaguely recall something about dual control being necessary for certain approvals, but I can't remember how it relates to check-out time.
upvoted 0 times
...
Jacquelyne
1 month ago
I feel like the one-time password option is more about security than check-out time, so I’m leaning towards B.
upvoted 0 times
...
Jesusita
1 month ago
I remember practicing a question about exclusive access, so maybe it's D since it combines both settings?
upvoted 0 times
...
Elly
3 months ago
I think it might be B, but I'm not completely sure if it covers the time limit aspect.
upvoted 0 times
...

Save Cancel