CyberArk PAM-CDE-RECERT Online Practice Questions and Exam Preparation

CyberArk PAM-CDE-RECERT Online Questions & Answers

• Question 101:

  Secure Connect provides the following. Choose all that apply.

  A. PSM connections to target devices that are not managed by CyberArk.
  B. Session Recording
  C. Real-time live session monitoring.
  D. PSM connections from a terminal without the need to login to the PVWA
  A. PSM connections to target devices that are not managed by CyberArk.
  B. Session Recording

• Question 102:

  A Reconcile Account can be specified in the Master Policy.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 103:

  Which component must be installed on the Vault if Distributed Vaults is used with PSM?

  A. RabbitMQ
  B. Disaster Recovery
  C. Remote Control Client
  D. Distributed Vault Server
  A. RabbitMQ

• Question 104:

  You receive this error:

  "Error in changepass to user domain\user on domain server(\domain.(winRc=5) Access is denied."

  Which root cause should you investigate?

  A. The account does not have sufficient permissions to change its own password.
  B. The domain controller is unreachable.
  C. The password has been changed recently and minimum password age is preventing the change.
  D. The CPM service is disabled and will need to be restarted.
  A. The account does not have sufficient permissions to change its own password.

• Question 105:

  Before the hardening process your customer identified a PSM Universal Connector executable that will be required to run on the PSM Which file should you update to allow this to run?

  A. PSMConfigureAppLockerxml
  B. PSMHardening xml
  C. PSMAppConfig xml
  D. PSMConfigureHardening xml
  A. PSMConfigureAppLockerxml

• Question 106:

  Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)

  A. Store the CD in a physical safe and mount the CD every time Vault maintenance is performed
  B. Copy the entire contents of the CD to the system Safe on the Vault
  C. Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions
  D. Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions
  A. Store the CD in a physical safe and mount the CD every time Vault maintenance is performed
  C. Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions
  D. Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions

• Question 107:

  DRAG DROP Arrange the steps to install the Password Vault Web Access (PVWA) in the correct sequence

  Select and Place:

  

  

• Question 108:

  CyberArk user Neil is trying to connect to the Target Linux server 192.168.1.64 using a domain account ACME/linuxuser01 on Domain Acme.corp using PSM for SSH server 192.168.65.145. What is the correct syntax?

  A. Ssh neil@linuxuser01:[email protected]@192.168.1.45
  B. Ssh neil@linuxuser01#[email protected]@192.168.1.45
  C. Ssh neil@[email protected]@192.168.65.145
  D. Ssh neil@[email protected]@[email protected]
  B. Ssh neil@linuxuser01#[email protected]@192.168.1.45

• Question 109:

  As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 110:

  The Password upload utility can be used to create safes.

  A. TRUE
  B. FALS
  A. TRUE