CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 11:

  Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

  A. Discovery and Audit (DMA)

  B. Auto Detection (AD)

  C. Export Vault Data (EVD)

  D. On Demand Privileges Manager (OPM)

  E. Accounts Discovery

  Correct Answer: ABE

• Question 12:

  Which Automatic Remediation is configurable for a PTA detection of a "Suspected Credential Theft"?

  A. Add to Pending

  B. Rotate Credentials

  C. Reconcile Credentials

  D. Disable Account

  Correct Answer: B

• Question 13:

  Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply.

  A. PSM connections to target devices that are not managed by CyberArk.

  B. Session Recording.

  C. Real-time live session monitoring.

  D. PSM connections from a terminal without the need to login to the PVWA.

  Correct Answer: ABC

• Question 14:

  In a default CyberArk installation, which group must a user be a member of to view the "reports" page in PVWA?

  A. PVWAMonitor

  B. ReportUsers

  C. PVWAReports

  D. Operators

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ReportsInPVWA.htm?TocPath=End%20U ser%7CReports%20and%20Audits%7C_____1#:~:text=Reports%20can%20be%20genera ted% 20in,this%20is%20the%20PVWAMonitor%20group

• Question 15:

  You are creating a shared safe for the help desk.

  What must be considered regarding the naming convention?

  A. Ensure your naming convention is no longer than 20 characters.

  B. Combine environments, owners and platforms to minimize the total number of safes created.

  C. Safe owners should determine the safe name to enable them to easily remember it.

  D. The use of these characters V:*<>".| is not allowed.

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/MESSAGES/Safe%20Properties%20New%20Safe .htm?TocPath=Administration%7CReferences%7CMessages%20and%20Responses%7C PrivateArk %20Client%7C_____11

• Question 16:

  A company requires challenge/response multi-factor authentication for PSMP sessions. Which server must you integrate with the CyberArk vault?

  A. LDAP

  B. PKI

  C. SAML

  D. RADIUS

  Correct Answer: D

• Question 17:

  Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.

  A. HeadStartInterval

  B. Interval

  C. ImmediateInterval

  D. The CPM does not change the password under this circumstance

  Correct Answer: B

• Question 18:

  PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

  A. True

  B. False, the PTA can suspend sessions whether the session is made via the PSM or not

  Correct Answer: B

• Question 19:

  Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

  A. Password change

  B. Password reconciliation

  C. Session suspension

  D. Session termination

  Correct Answer: A

• Question 20:

  If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attached to the account?

  A. KeyPath

  B. KeyFile

  C. ObjectName

  D. Address

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/10.10/en/Content/PASIMP/Adding-Accounts-with-SSH-Keys-using-the-AccountUploader-Utility-Appendix.htm