To manage automated onboarding rules, a CyberArk user must be a member of which group?

A company requires challenge/response multi-factor authentication for PSMP sessions. Which server must you integrate with the CyberArk vault?

Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?

A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication.
Which locations must you update?

An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?