CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 131:

  When onboarding multiple accounts from the Pending Accounts list, which associated setting must be the same across the selected accounts?

  A. Platform

  B. Connection Component

  C. CPM

  D. Vault

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Onboarding-Accounts-and-SSH-Keys.htm?Highlight=safe%20does%20not%20support%20properties

• Question 132:

  Platform settings are applied to _________.

  A. The entire vault.

  B. Network Areas

  C. Safes

  D. Individual Accounts

  Correct Answer: D

• Question 133:

  Which user is automatically added to all Safes and cannot be removed?

  A. Auditor

  B. Administrator

  C. Master

  D. Operator

  Correct Answer: C

• Question 134:

  Which built-in report from the reports page in PVWA displays the number of days until a password is due to expire?

  A. Privileged Accounts Inventory

  B. Privileged Accounts Compliance Status

  C. Activity Log

  D. Privileged Accounts CPM Status

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ReportsInPVWA.htm?TocPath=End%20U ser%7CReports%20and%20Audits%7C_____1

• Question 135:

  dbparm.ini is the main configuration file for the Vault.

  A. True

  B. False

  Correct Answer: A

• Question 136:

  What is the purpose of the PrivateArk Database service?

  A. Communicates with components

  B. Sends email alerts from the Vault

  C. Executes password changes

  D. Maintains Vault metadata

  Correct Answer: D

• Question 137:

  A Vault administrator have associated a logon account to one of their Unix root accounts in the vault. When attempting to verify the root account's password the Central Policy Manager (CPM) will:

  A. ignore the logon account and attempt to log in as root

  B. prompt the end user with a dialog box asking for the login account to use

  C. log in first with the logon account, then run the SU command to log in as root using the password in the Vault

  D. none of these

  Correct Answer: B

• Question 138:

  What is the primary purpose of Dual Control?

  A. Reduced risk of credential theft

  B. More frequent password changes

  C. Non-repudiation (individual accountability)

  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

  Correct Answer: D

• Question 139:

  What is the purpose of the Immediate Interval setting in a CPM policy?

  A. To control how often the CPM looks for System Initiated CPM work.

  B. To control how often the CPM looks for User Initiated CPM work.

  C. To control how often the CPM rests between password changes.

  D. To Control the maximum amount of time the CPM will wait for a password change to complete.

  Correct Answer: B

  When the Master Policy enforces check-in/check-out exclusive access, passwords are changed when the user clicks the Release button and releases the account. This is based on the ImmediateInterval parameter in the applied platform. If the user forgets to release the account, it is automatically released and changed by the CPM after a predetermined number of minutes, defined in the MinValidityPeriod parameter specified in the platform

• Question 140:

  You have been asked to turn off the time access restrictions for a safe. Where is this setting found?

  A. PrivateArk

  B. RestAPI

  C. Password Vault Web Access (PVWA)

  D. Vault

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/Advanced-Safe-Management.htm