CyberArk PAM-CDE-RECERT Online Practice Questions and Exam Preparation

CyberArk PAM-CDE-RECERT Online Questions & Answers

• Question 141:

  Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

  A. Password change
  B. Password reconciliation
  C. Session suspension
  D. Session termination
  A. Password change

• Question 142:

  By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

  A. Vault Admins
  B. Security Admins
  C. Security Operators
  D. Auditors
  B. Security Admins

• Question 143:

  VAULT authorizations may be granted to_____.

  A. Vault Users
  B. Vault Groups
  C. LDAP Users
  D. LDAP Groups
  C. LDAP Users

• Question 144:

  What are the basic network requirements to deploy a CPM server?

  A. Port 1858 to Vault and port 443 to PVWA
  B. Port 1858 only
  C. All ports to the vault
  D. Port UDP/1858 to vault and all required ports to the targets and port 389 to the PSM.
  A. Port 1858 to Vault and port 443 to PVWA

• Question 145:

  A customer installed multiple PVWAs in the production environment behind a load balancer VIP. They subsequently observed that all incoming traffic from the load balancer VIP goes to only one PVWA, even though all the PVWAs are up and running. What could be the likely cause of this situation?

  A. The load balancing algorithm is the least connections algorithm.
  B. The Certificate of the load balancer is not a wild card cert
  C. The load balancing pool only has one PVWA server
  D. SSL passthrough is not configured on the load balancer.
  C. The load balancing pool only has one PVWA server

• Question 146:

  Which of the Following can be configured in the Master Poky? Choose all that apply.

  A. Dual Control
  B. One Time Passwords
  C. Exclusive Passwords
  D. Password Reconciliation
  E. Ticketing Integration
  F. Required Properties
  G. Custom Connection Components
  H. Password Aging Rules
  A. Dual Control
  B. One Time Passwords
  C. Exclusive Passwords
  H. Password Aging Rules

• Question 147:

  What is the purpose of the PrivateArk Database service?

  A. Communicates with components
  B. Sends email alerts from the Vault
  C. Executes password changes
  D. Maintains Vault metadata
  D. Maintains Vault metadata

• Question 148:

  Which command configures email alerts within PTA if settings need to be changed post install?

  A. /opt/tomcat/utility/emailConfiguration.sh
  B. /opt/PTA/emailConfiguration.sh
  C. /opt/PTA/utility/emailConfig.sh
  D. /opt/tomcat/utility/emailSetup.sh
  A. /opt/tomcat/utility/emailConfiguration.sh

• Question 149:

  You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account. How should this be configured to allow for password management using least privilege?

  A. Configure each CPM to use the correct logon account.
  B. Configure each CPM to use the correct reconcile account.
  C. Configure the UNIX platform to use the correct logon account.
  D. Configure the UNIX platform to use the correct reconcile account.
  C. Configure the UNIX platform to use the correct logon account.

• Question 150:

  A user is receiving the error message "ITATS006E Station is suspended for User jsmith" when attempting to sign into the Password Vault Web Access (PVWA). Which utility would a Vault administrator use to correct this problem?

  A. createcredfile.exe
  B. cavaultmanager.exe
  C. PrivateArk
  D. PVWA
  C. PrivateArk