BT-PAM Practice Test

BT-PAM practice test: what's covered

• Password Safe (PASM) + Privileged Remote Access
• Sessions
• Jump
• Smart Rules

Free BT-PAM sample questions

1. Privileged Access Management (PAM) primarily addresses the risk that:

   • A. Users forget passwords
   • B. Privileged / administrative credentials and sessions are high-value attack targets — PAM vaults, rotates, brokers, monitors, and audits privileged access to reduce standing risk and enable accountability
   • C. Networks are slow
   • D. BGP routes flap
   Show answer

   Correct: B. PAM secures the keys to the kingdom: privileged credentials and sessions. It vaults secrets, rotates them, brokers access (least privilege / just-in-time), records sessions, and audits everything — shrinking the attack surface and giving accountability.

2. BeyondTrust Password Safe is BEST described as a:

   • A. Network firewall
   • B. PASM (Privileged Account & Session Management) solution — it vaults and rotates privileged credentials, brokers/records privileged sessions, and enforces access policy/approval
   • C. Endpoint antivirus
   • D. BGP router
   Show answer

   Correct: B. Password Safe = PASM: credential vaulting + automatic rotation + session brokering/recording + approval workflows. (BeyondTrust also offers EPM for endpoint privilege management — a different PAM pillar.)

3. Which TWO are core PAM capabilities Password Safe provides? (Choose 2)

   • A. Credential vaulting + automatic password rotation
   • B. Privileged session brokering, monitoring, and recording
   • C. BGP route advertisement
   • D. Email spam filtering
   Show answer

   Correct: A and B. PASM core: vault + rotate credentials, and broker + monitor + record sessions (often without revealing the password to the user). BGP/spam filtering are unrelated.

4. A key PAM principle is "users get access without ever seeing the password". This is achieved by:

   • A. Emailing the password
   • B. Session injection / brokering — Password Safe launches the session and injects the credential, so the user is authenticated to the target without the plaintext password being disclosed
   • C. BGP
   • D. Writing it on a whiteboard
   Show answer

   Correct: B. Credential injection means the secret never reaches the user — Password Safe brokers the session and injects the password to the target. The user works without knowing it, and the password can rotate freely.

5. BeyondTrust Privileged Remote Access (PRA) is primarily for:

   • A. Replacing the firewall
   • B. Securing remote/vendor/third-party privileged access to internal systems — without a VPN — using outbound Jump Technology and granular access policy + session control
   • C. BGP routing
   • D. Endpoint antivirus
   Show answer

   Correct: B. PRA gives secure, VPN-less privileged remote access (especially for vendors/third parties) via Jump Technology (outbound connections), with granular policy, session recording, and credential injection.

Last updated: 2026-10-19

BT-PAM practice test FAQ