CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 121:

  Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed.

  A. HeadStartInterval

  B. Interval

  C. ImmediateInterval

  D. The CPM does not change the password under this circumstance

  Correct Answer: C

• Question 122:

  When managing SSH keys, the CPM stored the Private Key

  A. In the Vault

  B. On the target server

  C. A and B

  D. Nowhere because the private key can always be generated from the public key.

  Correct Answer: A

• Question 123:

  Which is the primary purpose of exclusive accounts?

  A. Reduced risk of credential theft

  B. More frequent password changes

  C. Non-repudiation (individual accountability)

  D. To force a `collusion to commit' fraud ensuring no single actor may use a password without authorization

  Correct Answer: C

• Question 124:

  Which components support fault tolerance.

  A. CPM and PVWA

  B. PVWA and PSM

  C. PSM and PTA

  D. CPM and PTA

  Correct Answer: B

• Question 125:

  Which option in the Private Ark client is used to update users' Vault group memberships?

  A. Update > General tab

  B. Update > Authorizations tab

  C. Update > Member Of tab

  D. Update > Group tab

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm?TocPath=Administration%7CUser%20Management%7C_____7

• Question 126:

  Which keys are required to be present in order to start the PrivateArk Server service?

  A. Recovery public key

  B. Recovery private key

  C. Server key

  D. Safe key

  Correct Answer: AC

• Question 127:

  When a group is granted the 'Authorize Account Requests' permission on a safe Dual Control requests must be approved by

  A. Any one person from that group

  B. Every person from that group

  C. The number of persons specified by the Master Policy

  D. That access cannot be granted to groups

  Correct Answer: C

• Question 128:

  CyberArk recommends implementing object level access control on all Safes.

  A. True

  B. False

  Correct Answer: B

• Question 129:

  For a safe with Object Level Access enabled you can turn off Object Level Access Control when it no longer needed on the safe.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 130:

  Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.

  A. PACli.ini

  B. Vault.ini

  C. conf.ini

  D. A comma delimited upload file

  Correct Answer: BCD