CyberArk Defender – PAM — Question 3

You created a new safe and need to ensure the user group cannot see the password, but can connect through the PSM.
Which safe permissions must you grant to the group? (Choose two.)

Answer options

• A. List Accounts
• B. Use Accounts
• C. Access Safe without Confirmation
• D. Retrieve Files
• E. Confirm Request

Correct answer: A, B

Explanation

The correct permissions are 'List Accounts' and 'Use Accounts' as they allow the group to see the accounts without revealing the password. The other options either provide unnecessary access, such as 'Access Safe without Confirmation', or do not pertain to connecting through the PSM.