CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 111:

  What is the easiest way to duplicate an existing platform?

  A. From PrivateArk, copy/paste the appropriate Policy.ini file; then rename it.

  B. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.

  C. From PrivateArk, copy/paste the appropriate settings in PVConfiguration.xml; then update the policyName variable.

  D. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click "Save as" INSTEAD of save to duplicate and rename the platform.

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Adding-New-Platforms.htm#:~:text=Click%20ADMINISTRATION%20to%20display%20the,the%20Dupli cate%20Platform%20window% 20appears

• Question 112:

  An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?

  A. PSMConnect

  B. PSMMaster

  C. PSMGwUser

  D. PSMAdminConnect

  Correct Answer: D

• Question 113:

  Which service should NOT be running on the DR Vault when the primary Production Vault is up?

  A. PrivateArk Database

  B. PrivateArk Server

  C. CyberArk Vault Disaster Recovery (DR) service

  D. CyberArk Logical Container

  Correct Answer: B

• Question 114:

  The primary purpose of exclusive accounts is to ensure non-repudiation (Individual accountability).

  A. TRUE

  B. FALS

  Correct Answer: A

• Question 115:

  In addition to disabling Windows services or features not needed for PVWA operations, which tasks does PVWA Hardening.ps1 perform when run?

  A. Performs IIS hardening: Imports the CyberArk INF configuration

  B. Performs IIS hardening: Configures all group policy settings

  C. Performs IIS hardening: Renames the local Administrator Account

  D. Configures Windows Firewall: Removes all installation files.

  Correct Answer: B

• Question 116:

  If a user is a member of more than one group that has authorizations on a safe, by default that user is granted________.

  A. the vault will not allow this situation to occur.

  B. only those permissions that exist on the group added to the safe first.

  C. only those permissions that exist in all groups to which the user belongs.

  D. the cumulative permissions of all groups to which that user belongs.

  Correct Answer: B

• Question 117:

  Which of the following properties are mandatory when adding accounts from a file? (Choose three.)

  A. Safe Name

  B. Platform ID

  C. All required properties specified in the Platform

  D. Username

  E. Address

  F. Hostname

  Correct Answer: ABC

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/NewUI/NewUI-Add-multiple-accounts-in-PVWA.htm

• Question 118:

  Due to network activity, ACME Corp's PrivateArk Server became active on the OR Vault while the Primary Vault was also running normally. All the components continued to point to the Primary Vault.

  Which steps should you perform to restore DR replication to normal?

  A. Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  B. Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  C. Shutdown PrivateArk Server on Primary Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  D. Shutdown PrivateArk Server on DR Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  Correct Answer: B

• Question 119:

  Users can be resulted to using certain CyberArk interfaces (e.g.PVWA or PACLI).

  A. TRUE

  B. FALS

  Correct Answer: A

• Question 120:

  Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.

  A. TRUE

  B. FALSE

  Correct Answer: B