CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 101:

  Which of the following statements are NOT true when enabling PSM recording for a target Windows server? (Choose all that apply)

  A. The PSM software must be instated on the target server

  B. PSM must be enabled in the Master Policy (either directly, or through exception)

  C. PSMConnect must be added as a local user on the target server

  D. RDP must be enabled on the target server

  Correct Answer: AB

• Question 102:

  You are configuring the vault to send syslog audit data to your organization's SIEM solution. What is a valid value for the SyslogServerProtocol parameter in DBPARM.ini file?

  A. TLS

  B. SSH

  C. SMTP

  D. SNMP

  Correct Answer: A

• Question 103:

  You are installing HTML5 gateway on a Linux host using the RPM provided. After installing the Tomcat webapp, what is the next step in the installation process?

  A. Deploy the HTML5 service (guacd)

  B. Secure the connection between the guacd and the webapp

  C. Secure the webapp and JWT validation endpoint

  D. Configure ASLR

  Correct Answer: B

• Question 104:

  When on-boarding account using Accounts Feed, Which of the following is true?

  A. You must specify an existing Safe where are account will be stored when it is on boarded to the Vault

  B. You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.

  C. You can specify the name of a new Platform that will be created and associated with the account

  D. Any account that is on boarded can be automatically reconciled regardless of the platform it is associated with.

  Correct Answer: B

• Question 105:

  Which user(s) can access all passwords in the Vault?

  A. Administrator

  B. Any member of Vault administrators

  C. Any member of auditors

  D. Master

  Correct Answer: D

• Question 106:

  By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

  A. Vault Admins

  B. Security Admins

  C. Security Operators

  D. Auditors

  Correct Answer: B

• Question 107:

  A customer installed multiple PVWAs in the production environment behind a load balancer VIP. They subsequently observed that all incoming traffic from the load balancer VIP goes to only one PVWA, even though all the PVWAs are up and running. What could be the likely cause of this situation?

  A. The load balancing algorithm is the least connections algorithm.

  B. The Certificate of the load balancer is not a wild card cert

  C. The load balancing pool only has one PVWA server

  D. SSL passthrough is not configured on the load balancer.

  Correct Answer: C

• Question 108:

  A Reconcile Account can be specified in the Master Policy.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 109:

  Which of the following options is not set in the Master Policy?

  A. Password Expiration Time

  B. Enabling and Disabling of the Connection Through the PSM

  C. Password Complexity

  D. The use of "One-Time-Passwords"

  Correct Answer: C

• Question 110:

  What is the purpose of a linked account?

  A. To ensure that a particular collection of accounts all have the same password.

  B. To ensure a particular set of accounts all change at the same time.

  C. To connect the CPNI to a target system.

  D. To allow more than one account to work together as part of a password management process.

  Correct Answer: D