PAM-CDE-RECERT by CyberArk Actual Free Exam Q&As

Question 1

To manage automated onboarding rules, a CyberArk user must be a member of which group?

A. Auditors B. CPM User C. Administrators D. Vault Admins

Discussion 0

Correct Answer: D Vote an answer

Question 2

Which user(s) can access all passwords in the Vault?

A. Administrator B. Any member of Vault administrators C. Master D. Any member of auditors

Discussion 0

Correct Answer: C Vote an answer

Question 3

To enable the Automatic response "Add to Pending" within PTA when unmanaged credentials are found, what are the minimum permissions required by PTAUser for the PasswordManager_pending safe?

A. View Accounts, Update Account content, Update Account properties, Access Safe without confirmation, Manage Safe, View Audit B. Add accounts (includes update properties), Update Account content, Update Account properties, View Audit C. List Accounts, View Safe members, Add accounts (includes update properties), Update Account content, Update Account properties D. List Accounts, Add accounts (includes update properties), Delete Accounts, Manage Safe

Discussion 0

Correct Answer: C Vote an answer

Question 4

Which parameter must be provided when registering a primary Vault in Azure, but not in Amazon Web Services''

A. /RecPub B. /AdminPass C. /MasterPass D. /RDPGateway

Discussion 0

Correct Answer: D Vote an answer

Question 5

You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account's password the CPM will.....

A. None of these B. Log in to the system as the logon account, run the su command to log in as root, and then change root's password. C. Log in to the system as the logon account, then change roofs password D. Log in to the system as root, then change root's password

Discussion 0

Correct Answer: B Vote an answer

Question 6

Which configuration file and Vault utility are used to migrate the server key to an HSM?

A. VaultKeys.ini and ChangeServerKeys exe B. DBparm.ini and CAVaultManager exe C. DBparm.ini and ChangeServerKeys exe D. VaultKeys.ini and CAVaultManager exe

Discussion 0

Correct Answer: B Vote an answer

Question 7

Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

A. Unmanaged privileged access B. Golden Ticket C. Suspected credential theft D. Over-Pass-The-Hash

Discussion 0

Correct Answer: B Vote an answer

Question 8

A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings.
What is the issue?

A. The user must login as PSMAdminConnect B. The user is not a member of the Auditors group C. The PSM service is not running D. The user is not a member of the PVWAMonitor group

Discussion 0

Correct Answer: B Vote an answer

Question 9

In your organization the "click to connect" button is not active by default.
How can this feature be activated?

A. Policies > Master Policy > Password Management B. Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception C. Policies > Master Policy > Allow EPV transparent connections > Inactive D. Policies > Master Policy > Allow EPV transparent connections > Active

Discussion 0

Correct Answer: D Vote an answer

Question 10

You have been asked to turn off the time access restrictions for a safe.
Where is this setting found?

A. RestAPI B. PrivateArk C. Password Vault Web Access (PVWA) D. Vault

Discussion 0

Correct Answer: B Vote an answer

CyberArk CDE Recertification - PAM-CDE-RECERT Exam Practice Test