PAM-CDE-RECERT Questions Pass on Your First Attempt Dumps for CyberArk CDE Recertification Certified [Q123-Q142]

4/5 - (2 votes)

PAM-CDE-RECERT Questions Pass on Your First Attempt Dumps for CyberArk CDE Recertification Certified

PAM-CDE-RECERT Practice Test Pdf Exam Material

Q123. What is the purpose of the password reconcile process?

To test that CyberArk is storing accurate credentials for accounts.

To change the password of an account according to organizationally defined password rules.

To allow CyberArk to manage unknown or lost credentials.

To generate a new complex password.

Q124. Which authentication methods does PSM for SSH support?

CyberArk Password, LDAP, RADIUS, SAML

LDAP, Windows Authentication, SSH Keys

RADIUS, Oracle SSO, CyberArk Password

CyberArk Password, LDAP, RADIUS

Q125. What are the functions of the Remote Control Agent service? (Choose three.)

Allows remote monitoring the Vault

Sends SNMP traps from the Vault

Maintains audit data

Allows CyberArk services to be managed (start/stop/status) remotely

Q126. Select the best practice for storing the Master CD.

Copy the files to the Vault server and discard the CD

Copy the contents of the CD to a Hardware Security Module (HSM) and discard the CD

Store the CD in a secure location, such as a physical safe

Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder secured with NTFS permissions on the Vault

Q127. A Vault Administrator team member can log in to CyberArk, but for some reason, is not given Vault Admin rights.
Where can you check to verify that the Vault Admins directory mapping points to the correct AD group?

PVWA > User Provisioning > LDAP Integration > Mapping Criteria

PVWA > User Provisioning > LDAP Integration > Map Name

PVWA > Administration > LDAP Integration > Mappings

PVWA > Administration > LDAP Integration > AD Groups

Q128. In your organization the “click to connect” button is not active by default.
How can this feature be activated?

Policies > Master Policy > Allow EPV transparent connections > Inactive

Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception

Policies > Master Policy > Allow EPV transparent connections > Active

Policies > Master Policy > Password Management

Q129. What is the purpose of the PrivateArk Database service?

Communicates with components

Sends email alerts from the Vault

Executes password changes

Maintains Vault metadata

Q130. You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account’s password the CPM will…..

None of these

Q131. What is the primary purpose of One Time Passwords?

Reduced risk of credential theft

More frequent password changes

Non-repudiation (individual accountability)

To force a ‘collusion to commit’ fraud ensuring no single actor may use a password without authorization.

Q132. Multiple Password Vault Web Access (PVWA) servers can be load balanced.

True

False

Q133. You are creating a Dual Control workflow for a team’s safe.
Which safe permissions must you grant to the Approvers group?

List accounts, Authorize account request

Retrieve accounts, Access Safe without confirmation

Retrieve accounts, Authorize account request

List accounts, Unlock accounts

Q134. Which user(s) can access all passwords in the Vault?

Administrator

Any member of Vault administrators

Any member of auditors

Master

Q135. Users who have the ‘Access Safe without confirmation’ safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

TRUE

FALSE

Q136. When using multiple Central Policy Managers (CPM), which one of the following Safes is shared by all CPMs?

PasswordManager

PasswordManager_Pending

PasswordManager_workspace

PasswordManager_ADIntemal

Q137. When on-boarding account using Accounts Feed, Which of the following is true?

You must specify an existing Safe where are account will be stored when it is on boarded to the Vault

You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.

You can specify the name of a new Platform that will be created and associated with the account

Any account that is on boarded can be automatically reconciled regardless of the platform it is associated with.

Q138. What is the purpose of the HeadStartlnterval setting m a platform?

It determines how far in advance audit data is collected tor reports

It instructs the CPM to initiate the password change process X number of days before expiration.

It instructs the AIM Provider to ‘skip the cache’ during the defined time period

It alerts users of upcoming password changes x number of days before expiration.

The number of days before the password expires (according to the ExpirationPeriod parameter) that the CPM will initiate a password change process. This parameter is not relevant if the policy will be applied to a member of an account group.

Q139. When the PSM Gateway (also known as the HTML5 Gateway) is implemented, users must have an RDP client, such as MSTSC, installed on their endpoint in order to launch connections via the PSM.

True

False. When the PSM Gateway is implemented, the user only requires a browser in order launch a connection via the PSM.

Q140. You have been asked to turn off the time access restrictions for a safe.
Where is this setting found?

PrivateArk

RestAPI

Password Vault Web Access (PVWA)

Vault

Q141. When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA) and receive approval before being able to launch a secure connection via PSM for Windows (previously known as RDP Proxy).

True

False, a user can submit the request after the connection has already been initiated via the PSM for Windows

Q142. If a user is a member of more than one group that has authorizations on a Safe, by default that user is granted __________.

the Vault will not allow this situation to occur

only those permissions that exist on the group added to the Safe first

only those permissions that exist in all groups to which the user belongs

the cumulative permissions of all the groups to which that user belongs

Loading …