Exam PAM-DEF All QuestionsBrowse all questions from this exam
Question 12

Which methods can you use to add a user directly to the Vault Admin Group? (Choose three.)

    Correct Answer: A, B, C

    To add a user directly to the Vault Admin Group, you can use the REST API, PrivateArk Client, and PACLI (PrivateArk Command Line Interface). The REST API provides endpoints for user management, including adding users to groups. The PrivateArk Client is the traditional client interface for managing the CyberArk vault, which includes managing user groups. PACLI offers commands such as ADDGROUPMEMBER, which can be used to add a user to a group directly. PVWA, Active Directory, and Sailpoint facilitate user management but do not directly add users to the Vault Admin Group within this context. Therefore, the correct methods are the REST API, PrivateArk Client, and PACLI.

Discussion
cyberbratzOptions: ABC

ABC Option E allows you to add a user to an LDAP security group that is added as a vault admin but the question asks that you "add a user directly into the vault admin group" so E is incorrect. A and B are definitely correct. Using PACLI, it seems there is an option to use the command ADDGROUPMEMBER to add a user directly to the vault admin group. So definitely A, B, and C are correct.

celjouhariOptions: ABC

ABC https://docs.cyberark.com/PAS/Latest/en/Content/PACLI/User-Management-Functions.htm#UpdateGroup

Prasant_ShanmugasekarOptions: ABE

PACLI can't be used to directly add users to the Vault Admin group. You will have to first create the user and then add it using another command.

Bob_IrawanOptions: ABC

ABC is the most correct answer in my opinion

zoldikOptions: ABE

Answer Correct ABE

2995142Options: ABD

ABD, we can use the User Provisioning feature through PVWA to add an user to a group

miky_Cissp

https://docs.cyberark.com/PAS/13.0/en/Content/WebServices/Add%20Account%20v10.htm?tocpath=Developer%7CREST%20APIs%7CAccounts%7C_____5

miky_CisspOptions: ABC

ABC https://docs.cyberark.com/PAS/13.0/en/Content/PACLI/User-Management-Functions.htm?tocpath=Developer%7CCommand%20Line%20Interface%20(PACLI)%7C_____3