CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 191:

  You want to generate a license capacity report.

  Which tool accomplishes this?

  A. Password Vault Web Access

  B. PrivateArk Client

  C. DiagnoseDB Report

  D. RestAPI

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.1/en/Content/PASIMP/Reporting-License-Usage.htm

• Question 192:

  In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

  A. True.

  B. False. Because the user can also enter credentials manually using Secure Connect.

  C. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSM Connect.

  D. False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

  Correct Answer: D

• Question 193:

  Which component must be installed on the Vault if Distributed Vaults is used with PSM?

  A. RabbitMQ

  B. Disaster Recovery

  C. Remote Control Client

  D. Distributed Vault Server

  Correct Answer: A

• Question 194:

  Which of these accounts onboarding methods is considered proactive?

  A. Accounts Discovery

  B. Detecting accounts with PTA

  C. A Rest API integration with account provisioning software

  D. A DNA scan

  Correct Answer: B

• Question 195:

  Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that apply.

  A. PAR Agent

  B. PrivateArk Server Central Administration

  C. Edit DBParm.ini in a text editor.

  D. Setup.exe

  Correct Answer: AB

  PAR-Private Ark Remote Control Agent allows you to perform several Vault admin tasks (without restarting the Vault) and view machine statistics.

• Question 196:

  All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group Operations Staff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of Operations Managers never need to be able to use the show, copy or connect buttons themselves.

  Which safe permission do you need to grant Operations Staff? Check all that apply.

  A. Use Accounts

  B. Retrieve Accounts

  C. Authorize Password Requests

  D. Access Safe without Authorization

  Correct Answer: ABC

• Question 197:

  Your customer has five main data centers with one PVWA in each center under different URLs. How can you make this setup fault tolerant?

  A. This setup is already fault tolerant

  B. Install more PVWAs in each data center

  C. Continuously monitor PVWA status and send users the link to another PVWA if issues are encountered

  D. Load balance all PVWAs under same urL

  Correct Answer: D

• Question 198:

  DRAG DROP

  Match the log file name with the CyberArk Component that generates the log.

  Select and Place:

  

  Correct Answer:

  

• Question 199:

  DRAG DROP

  Arrange the steps to restore a Vault using PARestore for a Backup in the correct sequence.

  Select and Place:

  

  Correct Answer:

  

• Question 200:

  DRAG DROP

  For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

  Select and Place:

  

  Correct Answer: