CyberArk Exam PAM-DEF Topic 6 Question 48 Discussion

Actual exam question for CyberArk's PAM-DEF exam

Question #: 48
Topic #: 6

[All PAM-DEF Questions]

You are creating a Dual Control workflow for a team's safe.

Which safe permissions must you grant to the Approvers group?

AList accounts, Authorize account request

BRetrieve accounts, Access Safe without confirmation

CRetrieve accounts, Authorize account request

DList accounts, Unlock accounts

Show Suggested Answer

Suggested Answer: C

by Lasandra at Sep 18, 2024, 08:06 PM

Limited Time Offer

25%

Off

Get Premium PAM-DEF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Aimee

6 months ago

I'm gonna have to go with C on this one. Retrieving accounts and authorizing requests seems like the perfect combo for a Dual Control setup. Unless, of course, you're a secret agent looking to break into the safe. Then, I'd go with option B.

upvoted 0 times

Kristofer

5 months ago

But what if someone in the Approvers group tries to unlock accounts without permission?

upvoted 0 times

...

Beth

5 months ago

That's why it's important to only grant the necessary permissions for each role in the workflow.

upvoted 0 times

...

Lavonda

5 months ago

Yeah, retrieving accounts and authorizing requests provides a good balance of security.

upvoted 0 times

...

Jaleesa

5 months ago

I agree, option C seems like the best choice for a Dual Control setup.

upvoted 0 times

...

Burma

6 months ago

Ah, the age-old question of safe permissions. I say we just throw the safe out the window and call it a day. Much simpler that way!

upvoted 0 times

...

Vilma

6 months ago

C is the way to go, for sure. Gotta have that Authorize account request permission to make the Dual Control workflow work properly.

upvoted 0 times

...

Clement

6 months ago

I'm not sure about this one. I'm leaning towards B, but D also sounds like it could work. Hmm, decisions, decisions.

upvoted 0 times

Jerry

5 months ago

But what about D? It could also be a good option for granting permissions.

upvoted 0 times

...

Sol

5 months ago

I see your point, but I still think C is the safest choice for the team's safe workflow.

upvoted 0 times

...

Billye

5 months ago

I agree, C seems like the most secure choice for the Approvers group.

upvoted 0 times

...

Reynalda

5 months ago

I think C is the best option for safe permissions.

upvoted 0 times

...

Edna

6 months ago

I think the correct answer is C. Retrieve accounts and Authorize account request. That's the most logical combination for a Dual Control workflow.

upvoted 0 times

...

Tanja

6 months ago

As an avid safe enthusiast, I have to say this question is safe-tisfying. C is the clear winner here.

upvoted 0 times

Lavonna

6 months ago

C) Retrieve accounts, Authorize account request

upvoted 0 times

...

Buffy

6 months ago

B) Retrieve accounts, Access Safe without confirmation

upvoted 0 times

...

Aron

6 months ago

A) List accounts, Authorize account request

upvoted 1 times

...

Nguyet

7 months ago

A and D sound a bit too limited for an Approvers group. I'm going with C, the one that gives them the necessary permissions to do their job.

upvoted 0 times

...

Jani

7 months ago

Ha! Looks like the exam writers are trying to trick us. Clearly, the correct answer is C - Retrieve accounts and Authorize account request.

upvoted 0 times

Lashon

6 months ago

No, D is not correct. It should be C - Retrieve accounts and Authorize account request.

upvoted 0 times

...

Jamey

6 months ago

But what about D - List accounts and Unlock accounts?

upvoted 0 times

...

Lavina

6 months ago

I think you're right, C seems to be the correct answer.

upvoted 0 times

...

Ty

7 months ago

Hmm, I think C is the way to go. Approvers need to be able to retrieve accounts and authorize the requests, not just list them.

upvoted 0 times

Jutta

6 months ago

C is definitely the right choice for granting safe permissions to the Approvers group.

upvoted 0 times

...

Carole

6 months ago

I think C covers all the bases for the Dual Control workflow.

upvoted 0 times

...

Glenn

7 months ago

Yeah, C gives them the necessary permissions to handle account requests.

upvoted 0 times

...

Louisa

7 months ago

I agree, C seems like the best option for the Approvers group.

upvoted 0 times

...

German

7 months ago

I'm not sure. Maybe List accounts and Authorize account request would be better for the Approvers group. It depends on the specific needs of the team.

upvoted 0 times

...

Ernest

7 months ago

I agree with Beatriz. It makes sense for the Approvers group to have those permissions to ensure proper control over the safe.

upvoted 0 times

...

Beatriz

7 months ago

I think the safe permissions for the Approvers group should include Retrieve accounts and Authorize account request.

upvoted 0 times

...