CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 151:

  Which of the following PTA detections are included in the Core PAS offering?

  A. Suspected Credential Theft

  B. Over-Pass-The Hash

  C. Golden Ticket

  D. Unmanaged Privileged Access

  Correct Answer: D

• Question 152:

  As vault Admin you have been asked to configure LDAP authentication for your organization's CyberArk users. Which permissions do you need to complete this task?

  A. Audit Users and Add Network Areas

  B. Audit Users and Manage Directory Mapping

  C. Audit Users and Add/Update Users

  D. Audit Users and Activate Users

  Correct Answer: B

• Question 153:

  CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 154:

  You are logging into CyberArk as the Master user to recover an orphaned safe. Which items are required to log in as Master?

  A. Master CD, Master Password, console access to the Vault server, Private Ark Client

  B. Operator CD, Master Password, console access to the PVWA server, PVWA access

  C. Operator CD, Master Password, console access to the Vault server, Recover.exe

  D. Master CD, Master Password, console access to the PVWA server, Recover.exe

  Correct Answer: A

  Reference: https://cyberark-customers.force.com/s/article/How-to-log-in-as-the-Master-user

• Question 155:

  PSM for Windows (previously known as "RDP Proxy") supports connections to the following target systems

  A. Windows

  B. UNIX

  C. Oracle

  D. All of the above

  Correct Answer: A

• Question 156:

  What is the maximum number of levels of authorization you can set up in Dual Control?

  A. 1

  B. 2

  C. 3

  D. 4

  Correct Answer: B

• Question 157:

  To ensure all sessions are being recorded, a CyberArk administrator goes to the master policy and makes configuration changes. Which configuration is correct?

  A. Require privileged session monitoring and isolation = inactive; Record and save session activity = active.

  B. Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive.

  C. Require privileged session monitoring and isolation = active; Record and save session activity = active.

  D. Require privileged session monitoring and isolation = active; Record and save session activity = inactive.

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring-Recordings-and-Audits-in-PSM.htm

• Question 158:

  A user with administrative privileges to the vault can only grant other users privileges that he himself has.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 159:

  A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication. Which locations must you update?

  A. on the Vault server in Windows\System32\Etc\Hosts and in the PVWA Application under Administration > LDAP Integration > Directories > Hosts

  B. on the Vault server in Windows\System32\Etc\Hosts and on the PVWA server in Windows\System32\Etc\Hosts

  C. in the Private Ark client under Tools > Administrative Tools > Directory Mapping

  D. on the Vault server in the certificate store and on the PVWA server in the certificate store

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/LPLDAPIntegration.htm?TocPa th=Administration%7CUser%20Management%7CTransparent%20user%20management%20using% 20LDAP%7C_____2

• Question 160:

  You have been asked to configure SNMP remote monitoring for your organization's Vault servers. In the PARAgent.ini, which parameter specifies the destination of the Vault SNMP Traps?

  A. SNMPHostIP

  B. SNMPTrapPort

  C. SNMPCommunity

  D. SNMP Version

  Correct Answer: A