CyberArk PAM-CDE-RECERT Online Practice Questions and Exam Preparation

CyberArk PAM-CDE-RECERT Online Questions & Answers

• Question 151:

  The password upload utility must run from the CPM server

  A. TRUE
  B. FALSE
  B. FALSE

• Question 152:

  Which built-in report from the reports page in PVWA displays the number of days until a password is due to expire?

  A. Privileged Accounts Inventory
  B. Privileged Accounts Compliance Status
  C. Activity Log
  D. Privileged Accounts CPM Status
  B. Privileged Accounts Compliance Status

• Question 153:

  Your organization requires all passwords be rotated every 90 days. Where can you set this regulatory requirement?

  A. Master Policy
  B. Safe Templates
  C. PVWAConfig.xml
  D. Platform Configuration
  A. Master Policy

• Question 154:

  A customer is deploying PVWAs in the Amazon Web Services Public Cloud. Which load balancing option does CyberArk recommend?

  A. Network Load Balancer
  B. Classic Load Balancer
  C. HTTPS load balancer
  D. Public standard load balancer
  B. Classic Load Balancer

• Question 155:

  When a DR Vault Server becomes an active vault, it will automatically fail back to the original state once the Primary Vault comes back online.

  A. True; this is the default behavior
  B. False; this is not possible
  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file
  D. True, if the AllowFailback setting is set to "yes" in the dbparm.ini file
  B. False; this is not possible

• Question 156:

  Which user is automatically added to all Safes and cannot be removed?

  A. Auditor
  B. Administrator
  C. Master
  D. Operator
  C. Master

• Question 157:

  What is the primary purpose of Dual Control?

  A. Reduced risk of credential theft
  B. More frequent password changes
  C. Non-repudiation (individual accountability)
  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.
  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

• Question 158:

  Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

  A. PSM (i.e., launching connections by clicking on the "Connect" button in the PVWA)
  B. PSM for Windows (previously known as RDP Proxy)
  C. PSM for SSH (previously known as PSM SSH Proxy)
  D. All of the above
  A. PSM (i.e., launching connections by clicking on the "Connect" button in the PVWA)

• Question 159:

  Which values are acceptable in the address field of an Account?

  A. It must be a Fully Qualified Domain Name (FQDN)
  B. It must be an IP address
  C. It must be NetBIOS name
  D. Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable
  D. Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable

• Question 160:

  Which components support fault tolerance.

  A. CPM and PVWA
  B. PVWA and PSM
  C. PSM and PTA
  D. CPM and PTA
  B. PVWA and PSM