PAM-CDE-RECERT Exam Free Dumps for You to Prepare for The Test

dumps2023-05-22T10:02:17+08:00

Are you searching for the online PAM-CDE-RECERT training dumps? Here, you are at the right place. We provide the latest PAM-CDE-RECERT exam dumps for you to study all the related topics. As we all know, there are 65 multiple-choice questions, and you have 90 minutes to answer all the questions. The required passing score for PAM-CDE-RECERT exam is 70%. Free PAM-CDE-RECERT exam dumps questions are available below.

Page 1 of 7

1. What is the purpose of a linked account?

To ensure that a particular collection of accounts all have the same password.

To ensure a particular set of accounts all change at the same time.

To connect the CPNI to a target system.

To allow more than one account to work together as part of a password management process.

2. Which components support fault tolerance.

CPM and PVWA

PVWA and PSM

PSM and PTA

CPM and PTA

3. Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?

They are added to the Pending Accounts list and can be reviewed and manually uploaded.

They cannot be onboarded to the Password Vault.

They must be uploaded using third party tools.

They are not part of the Discovery Process.

4. What is the purpose of the Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how long the CPM rests between password changes.

To control the maximum amount of time the CPM will wait for a password change to complete.

5. It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

TRUE

FALS

6. Which CyberArk utility allows you to create lists of Master Policy Settings, owners and safes for output to text files or MSSQL databases?

Export Vault Data

Export Vault Information

PrivateArk Client

Privileged Threat Analytics

7. It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

TRUE

FALS

8. Which user(s) can access all passwords in the Vault?

Administrator

Any member of Vault administrators

Any member of auditors

Master

9. You are installing HTML5 gateway on a Linux host using the RPM provided.

After installing the Tomcat webapp, what is the next step in the installation process?

Deploy the HTML5 service (guacd)

Secure the connection between the guacd and the webapp

Secure the webapp and JWT validation endpoint

Configure ASLR

10. For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

Create an exception to the Master Policy to exclude the group from the workflow process.

Edith the master policy rule and modify the advanced’ Access safe without approval’ rule to include the group.

On the safe in which the account is stored grant the group the’ Access safe without audit’ authorization.

On the safe in which the account is stored grant the group the’ Access safe without confirmation’ authorization.

Page 2 of 7

11. Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

Password change

Password reconciliation

Session suspension

Session termination

12. Which components can connect to a satellite Vault in distributed Vault architecture?

CPM, EPM, PTA

PVWA, PSM

CPM, PVWA, PSM

CPM, PSM

13. Due to network activity, ACME Corp’s PrivateArk Server became active on the OR Vault while the Primary Vault was also running normally. All the components continued to point to the Primary Vault.

Which steps should you perform to restore DR replication to normal?

Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

Shutdown PrivateArk Server on Primary Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

Shutdown PrivateArk Server on DR Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

14. What is a requirement for setting fault tolerance for PSMs?

Use a load balancer

use a backup solution

CPM must be in all data centers

Install the Vault in an HA Cluster

15. What is the easiest way to duplicate an existing platform?

From PrivateArk, copy/paste the appropriate Policy.ini file: then rename it.

from the PVWA, navigate to the platforms page, select the existing platform that is similar to the new target account platform and click Duplicate, name the new platform.

From PrivateArk, cop/paste the appropriate setting in the PVConfiguration.xml then update the policName variable.

From the PVWA, navigate to the platforms page, select existing platform that is similar to the new target account platform, manually update the platform settings and click "Save as" instead of save to duplicate and rename the platform.

16. Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

TRUE

FALSE

17. What is the purpose of the PrivateArk Database service?

Communicates with components

Sends email alerts from the Vault

Executes password changes

Maintains Vault metadata

18. Which combination of Safe member permissions will allow end users to log in to a remote machine transparently but NOT show or copy the password?

Use Accounts, Retrieve Accounts, List Accounts

Use Accounts, List Accounts

Use Accounts

List Accounts, Retrieve Accounts

19. What is the easiest way to duplicate an existing platform?

From PrivateArk, copy/paste the appropriate Policy.ini file; then rename it.

From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.

From PrivateArk, copy/paste the appropriate settings in PVConfiguration.xml; then update the policyName variable.

From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click “Save as” INSTEAD of save to duplicate and rename the platform.

20. You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe Team1.

What do you need to recover and decrypt the object? (Choose three.)

Recovery Private Key

Recover.exe

Vault data

Recovery Public Key

Server Key

Master Password

Page 3 of 7

21. When onboarding multiple accounts from the Pending Accounts list, which associated setting must be the same across the selected accounts?

Platform

Connection Component

CPM

Vault

22. The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.

How are these keys managed?

CyberArk stores Private keys in the Vault and updates Public keys on target systems.

CyberArk stores Public keys in the Vault and updates Private keys on target systems.

CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.

CyberArk stores both Private and Public keys and can update target systems with either key.

23. You are creating a shared safe for the help desk.

What must be considered regarding the naming convention?

Ensure your naming convention is no longer than 20 characters.

Combine environments, owners and platforms to minimize the total number of safes created.

Safe owners should determine the safe name to enable them to easily remember it.

The use of these characters V:*<>".| is not allowed.

24. If a user is a member of more than one group that has authorizations on a safe, by default that user is granted________.

the vault will not allow this situation to occur.

only those permissions that exist on the group added to the safe first.

only those permissions that exist in all groups to which the user belongs.

the cumulative permissions of all groups to which that user belongs.

25. You are creating a Dual Control workflow for a team’s safe.

Which safe permissions must you grant to the Approvers group?

List accounts, Authorize account request

Retrieve accounts, Access Safe without confirmation

Retrieve accounts, Authorize account request

List accounts, Unlock accounts

26. CyberArk recommends implementing object level access control on all Safes.

True

False

27. The vault supports Role Based Access Control.

TRUE

FALSE

28. Which of the following logs contains information about errors related to PTA?

ITAlog.log

diamond.log

pm_error.log

WebApplication.log

29. By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

Vault Admins

Security Admins

Security Operators

Auditors

30. As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.

TRUE

FALSE

Page 4 of 7

31. Which of the following PTA detections are included in the Core PAS offering?

Suspected Credential Theft

Over-Pass-The Hash

Golden Ticket

Unmanaged Privileged Access

32. A Logon Account can be specified in the Master Policy.

TRUE

FALSE

33. In addition to disabling Windows services or features not needed for PVWA operations, which tasks does PVWA Hardening.ps1 perform when run?

Performs IIS hardening: Imports the CyberArk INF configuration

Performs IIS hardening: Configures all group policy settings

Performs IIS hardening: Renames the local Administrator Account

Configures Windows Firewall: Removes all installation files.

34. For Digital Vault Cluster in a high availability configuration, how does the cluster determine if a node is down?

The heartbeat s no longer detected on the private network.

The shared storage array is offline.

An alert is generated in the Windows Event log.

The Digital Vault Cluster does not detect a node failure.

35. Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile Utility? (Choose three.)

Operating System Username

Host IP Address

Client Hostname

Operating System Type (Linux/Windows/HP-UX)

Vault IP Address

Time Frame

36. A new HTML5 Gateway has been deployed in your organization.

Where do you configure the PSM to use the HTML5 Gateway?

Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway

Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers

Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway

Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details

37. Which Automatic Remediation is configurable for a PTA detection of a “Suspected Credential Theft”?

Add to Pending

Rotate Credentials

Reconcile Credentials

Disable Account

38. Which SMTP address can be set on the Notification Settings page to re-invoke the ENE setup wizard after the initial Vault installation.

255.255.255.255

8.8.8.8

192.168.1.1

1.1.1.1

39. DRAG DROP

For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

40. The password upload utility must run from the CPM server

TRUE

FALSE

Page 5 of 7

41. Which permissions are needed for the Active Directory user required by the Windows Discovery process?

Domain Admin

LDAP Admin

Read/Write

Read

42. tsparm.ini is the main configuration file for the Vault.

True

False

43. Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

Require dual control password access Approval

Enforce check-in/check-out exclusive access

Enforce one-time password access

Enforce check-in/check-out exclusive access & Enforce one-time password access

44. If a customer has one data center and requires high availability, how many PVWA's should be deployed.

Two

One PVWA cluster

One

Two PVWA Cluster

45. What is the purpose of the Immediate Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how often the CPM rests between password changes.

To Control the maximum amount of time the CPM will wait for a password change to complete.

46. Which report could show all accounts that are past their expiration dates?

Privileged Account Compliance Status report

Activity log

Privileged Account Inventory report

Application Inventory report

47. In a default CyberArk installation, which group must a user be a member of to view the “reports” page in PVWA?

PVWAMonitor

ReportUsers

PVWAReports

Operators

48. An auditor needs to login to the PSM in order to live monitor an active session.

Which user ID is used to establish the RDP connection to the PSM server?

PSMConnect

PSMMaster

PSMGwUser

PSMAdminConnect

49. Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

Discovery and Audit (DMA)

Auto Detection (AD)

Export Vault Data (EVD)

On Demand Privileges Manager (OPM)

Accounts Discovery

50. If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

Configure the Provider to change the password to match the Vault’s Password

Associate a reconcile account and configure the platform to reconcile automatically

Associate a logon account and configure the platform to reconcile automatically

Run the correct auto detection process to rediscover the password

Page 6 of 7

51. Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.

TRUE

FALSE

52. Which option in the Private Ark client is used to update users’ Vault group memberships?

Update > General tab

Update > Authorizations tab

Update > Member Of tab

Update > Group tab

53. As long as you are a member of the Vault Admins group you can grant any permission on any safe.

TRUE

FALSE

54. You have associated a logon account to one your UNIX cool accounts in the vault.

When attempting to [b]change [/b] the root account’s password the CPM will…..

None of these

55. How much disk space do you need on the server for a PAReplicate?

500 GB

1 TB

same as disk size on Satellite Vault

same as disk size on Primary Vault

56. DRAG DROP

Match each component to its respective Log File location.

57. Which of the following options is not set in the Master Policy?

Password Expiration Time

Enabling and Disabling of the Connection Through the PSM

Password Complexity

The use of “One-Time-Passwords”

58. What is the maximum number of levels of authorization you can set up in Dual Control?

59. In PVWA, you are attempting to play a recording made of a session by user jsmith, but there is no option to “Fast Forward” within the video. It plays and only allows you to skip between commands instead. You are also unable to download the video.

What could be the cause?

Recording is of a PSM for SSH session.

The browser you are using is out of date and needs an update to be supported.

You do not have the “View Audit” permission on the safe where the account is stored.

You need to update the recorder settings in the platform to enable screen capture every 10000 ms or less.

60. You are installing multiple PVWAs behind a load balancer.

Which statement is correct?

Port 1858 must be opened between the load balancer and the PVWAs

The load balancer must be configured in DNS round robin.

The load balancer must support "sticky sessions".

The Load Balancer Client Address Header parameter in the PVw

ini file must be set.

Page 7 of 7

61. CyberArk user Neil is trying to connect to the Target Linux server 192.168.1.64 using a domain account ACME/linuxuser01 on Domain Acme.corp using PSM for SSH server 192.168.65.145.

What is the correct syntax?

Ssh neil@linuxuser01: [email protected]@192.168.1.45

Ssh neil@linuxuser01#[email protected]@192.168.1.45

Ssh neil@[email protected]@192.168.65.145

Ssh neil@[email protected]@[email protected]

62. According to the DEFAULT Web Options settings, which group grants access to the REPORTS page?

PVWAUsers

Vault Admins

Auditors

PVWAMonitor

63. To manage automated onboarding rules, a CyberArk user must be a member of which group?

Vault Admins

CPM User

Auditors

Administrators

PAM-CDE-RECERT Exam Free Dumps for You to Prepare for The Test

PAM-CDE-RECERT Exam Free Dumps for You to Prepare for The Test

Share this post

Leave a Reply Cancel reply

Related Posts