CyberArk PAM-CDE-RECERT Online Practice Questions and Exam Preparation

CyberArk PAM-CDE-RECERT Online Questions & Answers

• Question 71:

  In addition to disabling Windows services or features not needed for PVWA operations, which tasks does PVWA Hardening.ps1 perform when run?

  A. Performs IIS hardening: Imports the CyberArk INF configuration
  B. Performs IIS hardening: Configures all group policy settings
  C. Performs IIS hardening: Renames the local Administrator Account
  D. Configures Windows Firewall: Removes all installation files.
  B. Performs IIS hardening: Configures all group policy settings

• Question 72:

  A Vault administrator have associated a logon account to one of their Unix root accounts in the vault. When attempting to verify the root account's password the Central Policy Manager (CPM) will:

  A. ignore the logon account and attempt to log in as root
  B. prompt the end user with a dialog box asking for the login account to use
  C. log in first with the logon account, then run the SU command to log in as root using the password in the Vault
  D. none of these
  B. prompt the end user with a dialog box asking for the login account to use

• Question 73:

  Your customer, ACME Corp, wants to store the Safes Data in Drive D instead of Drive

  C. Which file should you edit?

  A. TSparm.ini
  B. Vault.ini
  C. DBparm.ini
  D. user.ini
  A. TSparm.ini

• Question 74:

  You want to generate a license capacity report. Which tool accomplishes this?

  A. Password Vault Web Access
  B. PrivateArk Client
  C. DiagnoseDB Report
  D. RestAPI
  B. PrivateArk Client

• Question 75:

  Which combination of Safe member permissions will allow end users to log in to a remote machine transparently but NOT show or copy the password?

  A. Use Accounts, Retrieve Accounts, List Accounts
  B. Use Accounts, List Accounts
  C. Use Accounts
  D. List Accounts, Retrieve Accounts
  D. List Accounts, Retrieve Accounts

• Question 76:

  Which is the primary purpose of exclusive accounts?

  A. Reduced risk of credential theft
  B. More frequent password changes
  C. Non-repudiation (individual accountability)
  D. To force a `collusion to commit' fraud ensuring no single actor may use a password without authorization
  C. Non-repudiation (individual accountability)

• Question 77:

  SAFE Authorizations may be granted to____________. Select all that apply.

  A. Vault Users
  B. Vault Group
  C. LDAP Users
  D. LDAP Groups
  A. Vault Users
  B. Vault Group
  C. LDAP Users
  D. LDAP Groups

• Question 78:

  A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

  A. True
  B. False
  B. False

• Question 79:

  Which item is an option for PSM recording customization?

  A. Windows events text recorder with automatic play-back
  B. Windows events text recorder and universal keystrokes recording simultaneously
  C. Universal keystrokes text recorder with windows events text recorder disabled
  D. Custom audio recording for windows events
  B. Windows events text recorder and universal keystrokes recording simultaneously

• Question 80:

  The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys. How are these keys managed?

  A. CyberArk stores Private keys in the Vault and updates Public keys on target systems.
  B. CyberArk stores Public keys in the Vault and updates Private keys on target systems.
  C. CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.
  D. CyberArk stores both Private and Public keys and can update target systems with either key.
  A. CyberArk stores Private keys in the Vault and updates Public keys on target systems.