CyberArk CDE Recertification (PAM-CDE-RECERT) Free Practice Test

Question 1

As long as you are a member of the Vault Admins group you can grant any permission on any safe.

A. FALSE

B. TRUE

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which components can connect to a satellite Vault in distributed Vault architecture?

A. CPM, EPM, PTA

B. CPM,PVWA, PSM

C. PVWA, PSM

D. CPM, PSM

Correct Answer: C

Question 3

Time of day or day of week restrictions on when password verifications can occur configured in ____________________.

A. The Platform settings

B. The Safe settings

C. The Account Details

D. The Master Policy

Correct Answer: A

Question 4

Which of these accounts onboarding methods is considered proactive?

A. A DNA scan

B. Accounts Discovery

C. Detecting accounts with PTA

D. A Rest API integration with account provisioning software

Correct Answer: C

Question 5

Which parameter must be provided when registering a primary Vault in Azure, but not in Amazon Web Services''

A. /MasterPass

B. /AdminPass

C. /RecPub

D. /RDPGateway

Correct Answer: D

Question 6

Which CyberArk group does a user need to be part of to view recordings or live monitor sessions?

A. Auditors

B. DR Users

C. Vault Admin

D. Operators

Correct Answer: A

Question 7

It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur

A. FALSE

B. TRUE

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Within the Vault each password is encrypted by:

A. the server key

B. the recovery private key

C. its own unique key

D. the recovery public key

Correct Answer: C

Question 9

What is a prerequisite step betore CyberArk can be configured to support RADIUS authentication?

A. In the RADIUS server define the CyberArk Vault as a RADIUS client/agent

B. Log on to the PrivateArk Client display the User properties to the user to configure, run the Authentication method dropdown list and select Radius authentication.

C. In the Vault installation folder, run CAVaultManager as administrator with the SecureSecretFiles command

D. Navigate to /Server/Conf and open DBParm mi and set the RadiusServerslnfo parameter

Correct Answer: A

Question 10

You are installing PSM for SSH with AD-Bridge in CyberArkSSHD mode for your customer. ACME Corp What do you need to install to meet your customer's needs? (Choose 2)

A. libssh

B. CARKpsmp-mfra

C. CARKpsmp

D. CARKpsmp-AD Bridge

Correct Answer: A,C

Question 11

Which of the Following can be configured in the Master Poky? Choose all that apply.

A. Exclusive Passwords

B. Password Aging Rules

C. Dual Control

D. Custom Connection Components

E. Ticketing Integration

F. Password Reconciliation

G. Required Properties

H. One Time Passwords

Correct Answer: A,B,C,H

Welcome to TestSimulate

CyberArk CDE Recertification (PAM-CDE-RECERT) Free Practice Test