CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 91:

  It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

  A. TRUE

  B. FALS

  Correct Answer: A

  Password reconciliation can be restricted to specific days. This means that the CPM will only reconcile passwords on the days of the week specified in the RCExecutionDays parameter. The days of the week are represented by the first 3 letters of the name of the day. Sunday is represented by Sun, Mondayby Mon, etc.

• Question 92:

  What is the purpose of the Interval setting in a CPM policy?

  A. To control how often the CPM looks for System Initiated CPM work.

  B. To control how often the CPM looks for User Initiated CPM work.

  C. To control how long the CPM rests between password changes.

  D. To control the maximum amount of time the CPM will wait for a password change to complete.

  Correct Answer: A

• Question 93:

  If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

  A. Configure the Provider to change the password to match the Vault's Password

  B. Associate a reconcile account and configure the platform to reconcile automatically

  C. Associate a logon account and configure the platform to reconcile automatically

  D. Run the correct auto detection process to rediscover the password

  Correct Answer: B

• Question 94:

  Which of the following components can be used to create a tape backup of the Vault?

  A. Disaster Recovery

  B. Distributed Vaults

  C. Replicate

  D. High Availability

  Correct Answer: C

• Question 95:

  A customer's environment three data centers, consisting of 5,000 servers in Germany, 10,000 servers in Canada, 1,500 servers in Singapore. You want to manage target servers and avoid complex firewall rules. How many CPM's should you deploy?

  A. 1

  B. 3, total, 1 per data center

  C. 15

  D. 6, total, 2 per data center

  Correct Answer: B

• Question 96:

  What is a requirement for setting fault tolerance for PSMs?

  A. Use a load balancer

  B. use a backup solution

  C. CPM must be in all data centers

  D. Install the Vault in an HA Cluster

  Correct Answer: A

• Question 97:

  Within the Vault each password is encrypted by:

  A. the server key

  B. the recovery public key

  C. the recovery private key

  D. its own unique key

  Correct Answer: D

• Question 98:

  Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 99:

  The vault supports Subnet Based Access Control.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 100:

  When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

  A. True; this is the default behavior

  B. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file

  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file

  D. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the dbparm.ini file

  Correct Answer: B