CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 1:

  You receive this error:

  "Error in changepass to user domain\user on domain server(\domain.(winRc=5) Access is denied."

  Which root cause should you investigate?

  A. The account does not have sufficient permissions to change its own password.

  B. The domain controller is unreachable.

  C. The password has been changed recently and minimum password age is preventing the change.

  D. The CPM service is disabled and will need to be restarted.

  Correct Answer: A

  Reference: https://cyberark-customers.force.com/s/article/CPM-can-login-and-verify-a-password-but-can-t-change-the-password-winRc-5-Access-is-denied

• Question 2:

  How much disk space do you need on the server for a PAReplicate?

  A. 500 GB

  B. 1 TB

  C. same as disk size on Satellite Vault

  D. same as disk size on Primary Vault

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Installing-the-Vault-Backup-Utility.htm#Beforeinstallation

• Question 3:

  Which permissions are needed for the Active Directory user required by the Windows Discovery process?

  A. Domain Admin

  B. LDAP Admin

  C. Read/Write

  D. Read

  Correct Answer: A

• Question 4:

  What is the purpose of the HeadStartlnterval setting m a platform?

  A. It determines how far in advance audit data is collected tor reports

  B. It instructs the CPM to initiate the password change process X number of days before expiration.

  C. It instructs the AIM Provider to `skip the cache' during the defined time period

  D. It alerts users of upcoming password changes x number of days before expiration.

  Correct Answer: B

  The number of days before the password expires (according to the ExpirationPeriod parameter) that the CPM will initiate a password change process. This parameter is not relevant if the policy will be applied to a member of an account group.

• Question 5:

  You are onboarding an account that is not supported out of the box. What should you do first to obtain a platform to import?

  A. Create a service ticket in the customer portal explaining the requirements of the custom platform.

  B. Search common community portals like stackoverflow, reddit, github for an existing platform.

  C. From the platforms page, uncheck the "Hide non-supported platforms" checkbox and see if a platform meeting your needs appears.

  D. Visit the CyberArk marketplace and search for a platform that meets your needs.

  Correct Answer: A

• Question 6:

  Which report could show all accounts that are past their expiration dates?

  A. Privileged Account Compliance Status report

  B. Activity log

  C. Privileged Account Inventory report

  D. Application Inventory report

  Correct Answer: A

• Question 7:

  The password upload utility must run from the CPM server

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 8:

  You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account. How should this be configured to allow for password management using least privilege?

  A. Configure each CPM to use the correct logon account.

  B. Configure each CPM to use the correct reconcile account.

  C. Configure the UNIX platform to use the correct logon account.

  D. Configure the UNIX platform to use the correct reconcile account.

  Correct Answer: C

  Reference:https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/PASIMP/Linked-PAS-Accounts.htm#Overview

• Question 9:

  Which PTA sensors are required to detect suspected credential theft?

  A. Logs, Vault Logs

  B. Logs, Network Sensor, Vault Logs

  C. Logs, PSM Logs, CPM Logs

  D. Logs, Network Sensor, EPM

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/10.10/en/Content/PTA/What-Does-PTA-Detect.htm

• Question 10:

  The Vault administrator can change the Vault license by uploading the new license to the system Safe.

  A. True

  B. False

  Correct Answer: A