CAD Privileged Session Manager Setup 2

Question 1

Which Windows feature must be enabled on the PSM server to support Remote Desktop Protocol connections from end users?

Accepted Answer

Remote Desktop Services (Terminal Services)

Answer

PSM relies on Remote Desktop Services (Terminal Services) to host user sessions on the PSM server and redirect them to target systems.

Question 2

What is the purpose of the PSMConnect domain user account created during PSM installation?

Accepted Answer

It is used to log users into RDP sessions on the PSM server

Answer

PSMConnect is a dedicated domain account used to establish RDP sessions on the PSM server on behalf of connecting users.

Question 3

During PSM hardening, which of the following is restricted to prevent data leakage from a privileged session?

Accepted Answer

Clipboard redirection and drive mapping

Answer

PSM hardening disables clipboard redirection and drive mapping to prevent users from copying data out of privileged sessions.

Question 4

Which CyberArk component must PSM communicate with to retrieve target account credentials during session initiation?

Accepted Answer

CyberArk Vault (Digital Vault)

Answer

PSM connects directly to the CyberArk Vault to retrieve the target account's password at session initiation time.

Question 5

What is the role of the PSMAdminConnect account in a PSM deployment?

Accepted Answer

It is used by CyberArk support to shadow active sessions for troubleshooting

Answer

PSMAdminConnect is a privileged domain account that allows authorized admins or CyberArk support to shadow (monitor) live sessions.

(CAD) CyberArk Defender Certification Practice Test