Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.

• A.TRUE
• B.FALSE

Comment: *

Name: *

Email: *

Verification: *

When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA) and receive approval before being able to launch a secure connection via PSM for Windows (previously known as RDP Proxy).

• A.False, a user can submit the request after the connection has already been initiated via the PSM for Windows
• B.True

Comment: *

Name: *

Email: *

Verification: *

If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

• A.Configure the Provider to change the password to match the Vault's Password
• B.Run the correct auto detection process to rediscover the password
• C.Associate a reconcile account and configure the platform to reconcile automatically
• D.Associate a logon account and configure the platform to reconcile automatically

Comment: *

Name: *

Email: *

Verification: *

What is the primary purpose of Dual Control?

• A.Reduced risk of credential theft
• B.To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.
• C.Non-repudiation (individual accountability)
• D.More frequent password changes

Comment: *

Name: *

Email: *

Verification: *

Your organization has a requirement to allow users to "check out passwords" and connect to targets with the same account through the PSM.
What needs to be configured in the Master policy to ensure this will happen?

• A.Enforce check-in/check-out exclusive access = inactive; Require privileged session monitoring and isolation = inactive
• B.Enforce check-in/check-out exclusive access = active; Record and save session activity = inactive
• C.Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active
• D.Enforce check-in/check-out exclusive access = inactive; Record and save session activity = active

Comment: *

Name: *

Email: *

Verification: *