CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 171:

  Which usage can be added as a service account platform?

  A. Kerberos Tokens

  B. IIS Application Pools

  C. PowerShell Libraries

  D. Loosely Connected Devices

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/LooselyConnectedDevices.htm

• Question 172:

  Which of the following Privileged Session Management (PSM) solutions support live monitoring of active sessions?

  A. PSM (i.e., launching connections by clicking on the connect button in the Password Vault Web Access (PVWA)

  B. PSM for Windows (previously known as RDP Proxy)

  C. PSM for SSH (previously known as PSM-SSH Proxy)

  D. All of the above

  Correct Answer: D

• Question 173:

  A Logon Account can be specified in the Master Policy.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 174:

  PSM captures a record of each command that was executed in Unix.

  A. TRIE

  B. FALSE

  Correct Answer: A

• Question 175:

  It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

  A. TRUE

  B. FALS

  Correct Answer: A

• Question 176:

  A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request. What is the correct location to identify users or groups who can approve?

  A. PVWA> Administration > Platform Configuration > Edit Platform > UI and Workflow > Dual Control> Approvers

  B. PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests

  C. PVWA> Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers

  D. PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-setup-workflow.htm

• Question 177:

  Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile Utility? (Choose three.)

  A. Operating System Username

  B. Host IP Address

  C. Client Hostname

  D. Operating System Type (Linux/Windows/HP-UX)

  E. Vault IP Address

  F. Time Frame

  Correct Answer: ABC

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/CreateCredFile-Utility.htm

• Question 178:

  A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

  A. True

  B. False

  Correct Answer: B

• Question 179:

  The System safe allows access to the Vault configuration files.

  A. TRUE

  B. FALS

  Correct Answer: A

• Question 180:

  You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account's password the CPM will.....

  A. Log in to the system as root, then change root's password

  B. Log in to the system as the logon account, then change roofs password

  C. Log in to the system as the logon account, run the su command to log in as root, and then change root's password.

  D. None of these

  Correct Answer: C