CyberArk PAM-CDE-RECERT Online Practice Questions and Exam Preparation

CyberArk PAM-CDE-RECERT Online Questions & Answers

• Question 1:

  Accounts Discovery allows secure connections to domain controllers.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 2:

  PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

  A. True
  B. False, the PTA can suspend sessions whether the session is made via the PSM or not
  B. False, the PTA can suspend sessions whether the session is made via the PSM or not

• Question 3:

  Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp. When the client's machine makes an RDP connection to the PSM server, which user will be utilized?

  A. Credentials stored in the Vault for the target machine
  B. Shadowuser
  C. PSMConnect
  D. PSMAdminConnect
  C. PSMConnect

• Question 4:

  Time of day or day of week restrictions on when password verifications can occur configured in ____________________.

  A. The Master Policy
  B. The Platform settings
  C. The Safe settings
  D. The Account Details
  B. The Platform settings

• Question 5:

  Your organization has a requirement to allow users to "check out passwords" and connect to targets with the same account through the PSM. What needs to be configured in the Master policy to ensure this will happen?

  A. Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active
  B. Enforce check-in/check-out exclusive access = inactive; Require privileged session monitoring and isolation = inactive
  C. Enforce check-in/check-out exclusive access = inactive; Record and save session activity = active
  D. Enforce check-in/check-out exclusive access = active; Record and save session activity = inactive
  A. Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active

• Question 6:

  You are installing multiple PVWAs behind a load balancer. Which statement is correct?

  A. Port 1858 must be opened between the load balancer and the PVWAs
  B. The load balancer must be configured in DNS round robin.
  C. The load balancer must support "sticky sessions".
  D. The LoadBalancerClientAddressHeader parameter in the PVwA.ini file must be set.
  C. The load balancer must support "sticky sessions".

• Question 7:

  The vault supports Role Based Access Control.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 8:

  In your organization the "click to connect" button is not active by default. How can this feature be activated?

  A. Policies > Master Policy > Allow EPV transparent connections > Inactive
  B. Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception
  C. Policies > Master Policy > Allow EPV transparent connections > Active
  D. Policies > Master Policy > Password Management
  C. Policies > Master Policy > Allow EPV transparent connections > Active

• Question 9:

  Which report could show all accounts that are past their expiration dates?

  A. Privileged Account Compliance Status report
  B. Activity log
  C. Privileged Account Inventory report
  D. Application Inventory report
  A. Privileged Account Compliance Status report

• Question 10:

  Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?

  A. Yes, when using the connect button, CyberArk uses the PMTerminal.exe process which bypasses the root SSH restriction.
  B. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.
  C. Yes, if a logon account is associated with the root account.
  D. No, it is not possible.
  B. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.