CyberArk PAM-CDE-RECERT Online Practice Questions and Exam Preparation

CyberArk PAM-CDE-RECERT Online Questions & Answers

• Question 81:

  Which tools are used during a CPM renaming process?

  A. APIKeyManager Utility
  B. CreateCredFile Utility
  C. CPMinDomain_Hardening.ps1
  D. PMTerminal.exe
  E. Data Execution Prevention
  A. APIKeyManager Utility
  B. CreateCredFile Utility

• Question 82:

  DRAG DROP

  Match the Status of Service on a DR Vault to what is displayed when it is operating normally in Replication mode.

  Select and Place:

  

  

• Question 83:

  Which of the following PTA detections are included in the Core PAS offering?

  A. Suspected Credential Theft
  B. Over-Pass-The Hash
  C. Golden Ticket
  D. Unmanaged Privileged Access
  D. Unmanaged Privileged Access

• Question 84:

  Which certificate type do you need to configure the vault for LDAP over SSL?

  A. the CA Certificate that signed the certificate used by the External Directory
  B. a CA signed Certificate for the Vault server
  C. a CA signed Certificate for the PVWA server
  D. a self-signed Certificate for the Vault
  A. the CA Certificate that signed the certificate used by the External Directory

• Question 85:

  What is a requirement for setting fault tolerance for PSMs?

  A. Use a load balancer
  B. use a backup solution
  C. CPM must be in all data centers
  D. Install the Vault in an HA Cluster
  A. Use a load balancer

• Question 86:

  When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

  A. True; this is the default behavior
  B. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file
  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file
  D. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the dbparm.ini file
  B. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file

• Question 87:

  Which of the following statements are NOT true when enabling PSM recording for a target Windows server? (Choose all that apply)

  A. The PSM software must be instated on the target server
  B. PSM must be enabled in the Master Policy (either directly, or through exception)
  C. PSMConnect must be added as a local user on the target server
  D. RDP must be enabled on the target server
  A. The PSM software must be instated on the target server
  B. PSM must be enabled in the Master Policy (either directly, or through exception)

• Question 88:

  Which pre-requisite step must be completed before installing a Vault?

  A. Join the server to the domain
  B. install a clean operating system
  C. install anti-virus software
  D. Copy the master CD to a folder on the Vault server
  B. install a clean operating system

• Question 89:

  Which service should NOT be running on the DR Vault when the primary Production Vault is up?

  A. PrivateArk Database
  B. PrivateArk Server
  C. CyberArk Vault Disaster Recovery (DR) service
  D. CyberArk Logical Container
  B. PrivateArk Server

• Question 90:

  Which report shows the accounts that are accessible to each user?

  A. Activity report
  B. Entitlement report
  C. Privileged Accounts Compliance Status report
  D. Applications Inventory report
  B. Entitlement report