CyberArk CyberArk Certifications PAM-CDE-RECERT Questions & Answers

• Question 61:

  Which tools are used during a CPM renaming process?

  A. APIKeyManager Utility

  B. CreateCredFile Utility

  C. CPMinDomain_Hardening.ps1

  D. PMTerminal.exe

  E. Data Execution Prevention

  Correct Answer: AB

• Question 62:

  The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.

  How are these keys managed?

  A. CyberArk stores Private keys in the Vault and updates Public keys on target systems.

  B. CyberArk stores Public keys in the Vault and updates Private keys on target systems.

  C. CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.

  D. CyberArk stores both Private and Public keys and can update target systems with either key.

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.4/en/Content/SSHKM/Using%20SSH%20Keys.htm

• Question 63:

  Accounts Discovery allows secure connections to domain controllers.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 64:

  Which command configures email alerts within PTA if settings need to be changed post install?

  A. /opt/tomcat/utility/emailConfiguration.sh

  B. /opt/PTA/emailConfiguration.sh

  C. /opt/PTA/utility/emailConfig.sh

  D. /opt/tomcat/utility/emailSetup.sh

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PTA/Outbound-Sending-PTA-Alerts-to-Email.htm

• Question 65:

  How does the Vault administrator apply a new license file?

  A. Upload the license.xml file to the system Safe and restart the PrivateArk Server service

  B. Upload the license.xml file to the system Safe

  C. Upload the license.xml file to the Vault Internal Safe and restart the PrivateArk Server service

  D. Upload the license.xml file to the Vault Internal Safe

  Correct Answer: B

• Question 66:

  What are the basic network requirements to deploy a CPM server?

  A. Port 1858 to Vault and port 443 to PVWA

  B. Port 1858 only

  C. All ports to the vault

  D. Port UDP/1858 to vault and all required ports to the targets and port 389 to the PSM.

  Correct Answer: A

• Question 67:

  Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp. When the client's machine makes an RDP connection to the PSM server, which user will be utilized?

  A. Credentials stored in the Vault for the target machine

  B. Shadowuser

  C. PSMConnect

  D. PSMAdminConnect

  Correct Answer: C

• Question 68:

  To manage automated onboarding rules, a CyberArk user must be a member of which group?

  A. Vault Admins

  B. CPM User

  C. Auditors

  D. Administrators

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/automatic_onboarding_rules.htm#:~:text=T o%20manage%20onboarding%20rules%2C%20users,to%20the%20Vault%20admins%20 group

• Question 69:

  When managing SSH keys, the CPM stores the Public Key

  A. In the Vault

  B. On the target server

  C. A and B

  D. Nowhere because the public key can always be generated from the private key.

  Correct Answer: B

• Question 70:

  In a rule using "Privileged Session Analysis and Response" in PTA, which session options are available to configure as responses to activities?

  A. Suspend, Terminate, None

  B. Suspend, Terminate, Lock Account

  C. Pause, Terminate, None

  D. Suspend, Terminate

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/Security-Configuration.htm?TocPath=End%20User%7CSecurity%20Events%7C_____3