CyberArk PAM-CDE-RECERT Online Practice Questions and Exam Preparation

CyberArk PAM-CDE-RECERT Online Questions & Answers

• Question 171:

  What is mandatory for a PVWA installation?

  A. A DNS entry for PVWA url must be created.
  B. A company signed TLS certificate must be imported into the server
  C. A vault Administrator user must be used to register the PVWA
  D. Data Execution Prevention must be disabled.
  C. A vault Administrator user must be used to register the PVWA

• Question 172:

  What is a prerequisite step before CyberArk can be configured to support RADIUS authentication?

  A. Log on to the PrivateArk Client, display the user properties of the user to configure, run the Authentication method drop-down list, and select RADIUS authentication.
  B. In the RADIUS server, define the CyberArk Vault as RADIUS client/agent.
  C. In the Vault Installation folder, run CAVaultManger as Administrator with the SecureSecretFiles command.
  D. Navigate to /Server/Conf and open DBParms.ini and set the RadiusServersInfo parameter.
  B. In the RADIUS server, define the CyberArk Vault as RADIUS client/agent.

• Question 173:

  It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

  A. TRUE
  B. FALS
  A. TRUE

• Question 174:

  Which of the following properties are mandatory when adding accounts from a file? (Choose three.)

  A. Safe Name
  B. Platform ID
  C. All required properties specified in the Platform
  D. Username
  E. Address
  F. Hostname
  A. Safe Name
  B. Platform ID
  C. All required properties specified in the Platform

• Question 175:

  A Logon Account can be specified in the Master Policy.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 176:

  It is possible to control the hours of the day during which a user may log into the vault.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 177:

  Which user(s) can access all passwords in the Vault?

  A. Administrator
  B. Any member of Vault administrators
  C. Any member of auditors
  D. Master
  D. Master

• Question 178:

  If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attached to the account?

  A. KeyPath
  B. KeyFile
  C. ObjectName
  D. Address
  B. KeyFile

• Question 179:

  For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

  A. Create an exception to the Master Policy to exclude the group from the workflow process.
  B. Edith the master policy rule and modify the advanced' Access safe without approval' rule to include the group.
  C. On the safe in which the account is stored grant the group the' Access safe without audit' authorization.
  D. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization.
  D. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization.

• Question 180:

  An auditor initiates a live monitoring session to PSM server to view an ongoing live session. When the auditor's machine makes an RDP connection the PSM server, which user will be used?

  A. PSMAdminConnect
  B. Shadowuser
  C. PSMConnect
  D. Credentials stored in the Vault for the target machine
  A. PSMAdminConnect