Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CyberArk PAM-DEF Exam - Topic 4 Question 74 Discussion

Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?
B) Enforce check-in/check-out exclusive access
A) Require dual control password access Approval
C) Enforce one-time password access
D) Enforce check-in/check-out exclusive access & enforce one-time password access

CyberArk PAM-DEF Exam - Topic 4 Question 74 Discussion

Actual exam question for CyberArk's PAM-DEF exam
Question #: 74
Topic #: 4
[All PAM-DEF Questions]

Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

Show Suggested Answer Hide Answer
Suggested Answer: B

According to the CyberArk Defender PAM documentation, the Master Policy setting that must be active in order to have an account checked-out by one user for a pre-determined amount of time is Enforce check-in/check-out exclusive access. This setting enables organizations to permit users to check out a 'one-time' password and lock it so that no other users can retrieve it at the same time. After the user has used the password, the user checks the password back into the Vault. This ensures exclusive usage of the privileged account, enabling full control and tracking for the password. The duration of the check-out period can be configured in the platform settings for each account.Reference:

Account check-out and check-in - CyberArk

Master Policy - CyberArk


Contribute your Thoughts:

0/2000 characters
Curt
3 days ago
A seems unnecessary for this.
upvoted 0 times
...
Gaston
8 days ago
I feel D is too complicated.
upvoted 0 times
...
Jarvis
13 days ago
It makes sense for exclusive access.
upvoted 0 times
...
Judy
19 days ago
Why B?
upvoted 0 times
...
Jarvis
24 days ago
I think it's B.
upvoted 0 times
...
Ricarda
29 days ago
Not sure about that, could be more to it than just B.
upvoted 0 times
...
Bo
1 month ago
Totally agree with B, it makes sense for check-out.
upvoted 0 times
...
Lavonne
1 month ago
Wait, is it really just B? That seems too simple.
upvoted 0 times
...
Penney
1 month ago
I think it's D, you need both for security.
upvoted 0 times
...
Galen
2 months ago
B is the right answer for exclusive access.
upvoted 0 times
...
Hyun
2 months ago
Definitely B, it’s all about that check-in/check-out!
upvoted 0 times
...
Janessa
2 months ago
I thought one-time passwords were enough on their own.
upvoted 0 times
...
Ricarda
2 months ago
Wait, are you sure it’s not D? Sounds like both are needed.
upvoted 0 times
...
Colette
2 months ago
Totally agree, B makes sense!
upvoted 0 times
...
Simona
3 months ago
B is the right answer for exclusive access.
upvoted 0 times
...
German
3 months ago
I vaguely recall something about dual control being necessary for certain approvals, but I can't remember how it relates to check-out time.
upvoted 0 times
...
Jacquelyne
3 months ago
I feel like the one-time password option is more about security than check-out time, so I’m leaning towards B.
upvoted 0 times
...
Jesusita
3 months ago
I remember practicing a question about exclusive access, so maybe it's D since it combines both settings?
upvoted 0 times
...
Elly
5 months ago
I think it might be B, but I'm not completely sure if it covers the time limit aspect.
upvoted 0 times
...

Save Cancel