CyberArk PAM-CDE-RECERT Online Practice Questions and Exam Preparation

CyberArk PAM-CDE-RECERT Online Questions & Answers

• Question 121:

  PSM for Windows (previously known as "RDP Proxy") supports connections to the following target systems

  A. Windows
  B. UNIX
  C. Oracle
  D. All of the above
  A. Windows

• Question 122:

  You are creating a new Rest API user that utilizes CyberArk Authentication. What is a correct process to provision this user?

  A. Private Ark Client > Tools > Administrative Tools > Users and Groups > New > User
  B. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Add
  C. PVWA > User Provisioning > LDAP Integration > Add Mapping
  D. PVWA > User Provisioning > Users and Groups > New > User
  A. Private Ark Client > Tools > Administrative Tools > Users and Groups > New > User

• Question 123:

  What is the purpose of the Interval setting in a CPM policy?

  A. To control how often the CPM looks for System Initiated CPM work.
  B. To control how often the CPM looks for User Initiated CPM work.
  C. To control how long the CPM rests between password changes.
  D. To control the maximum amount of time the CPM will wait for a password change to complete.
  A. To control how often the CPM looks for System Initiated CPM work.

• Question 124:

  What is the name of the Platform parameters that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

  A. Min Validity Period
  B. Interval
  C. Immediate Interval
  D. Timeout
  A. Min Validity Period

• Question 125:

  In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.

  A. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server's root account.
  B. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.
  C. Configure the Unix system to allow SSH logins.
  D. Configure the CPM to allow SSH logins.
  B. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.

• Question 126:

  Which CyberArk utility allows you to create lists of Master Policy Settings, owners and safes for output to text files or MSSQL databases?

  A. Export Vault Data
  B. Export Vault Information
  C. PrivateArk Client
  D. Privileged Threat Analytics
  A. Export Vault Data

• Question 127:

  What is the default username for the PSM for SSH maintenance user?

  A. proxymng
  B. psmpjnamtenance
  C. psmpma/ntenanceuser
  D. psmpmnguser
  A. proxymng

• Question 128:

  You are creating a shared safe for the help desk.

  What must be considered regarding the naming convention?

  A. Ensure your naming convention is no longer than 20 characters.
  B. Combine environments, owners and platforms to minimize the total number of safes created.
  C. Safe owners should determine the safe name to enable them to easily remember it.
  D. The use of these characters V:*".| is not allowed.
  D. The use of these characters V:*".| is not allowed.

• Question 129:

  After installing the first PSM server and before installing additional PSM servers you must ensure the user performing the installation is not a direct owner of which safe?

  A. PSMUnmanagedSessionAccounts Safe
  B. PSMRecordmgsSessionAccounts Safe
  C. PSMUnmanagedApphcationAccounts Safe
  D. PSMSessionBackupAccounts Safe
  A. PSMUnmanagedSessionAccounts Safe

• Question 130:

  You are onboarding an account that is not supported out of the box. What should you do first to obtain a platform to import?

  A. Create a service ticket in the customer portal explaining the requirements of the custom platform.
  B. Search common community portals like stackoverflow, reddit, github for an existing platform.
  C. From the platforms page, uncheck the "Hide non-supported platforms" checkbox and see if a platform meeting your needs appears.
  D. Visit the CyberArk marketplace and search for a platform that meets your needs.
  A. Create a service ticket in the customer portal explaining the requirements of the custom platform.