PAM-CDE-RECERT Exam Training Practice Tests (CyberArk CDE Recertification)]

Question 1

For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

A. On the safe in which the account is stored grant the group the' Access safe without audit' authorization. B. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization. C. Create an exception to the Master Policy to exclude the group from the workflow process. D. Edith the master policy rule and modify the advanced' Access safe without approval' rule to include the group.

Correct Answer: B

Question 2

Match each key to its recommended storage location.

Correct Answer:

Question 3

In a default CyberArk installation, which group must a user be a member of to view the "reports" page in PVWA?

A. PVWAReports B. ReportUsers C. Operators D. PVWAMonitor

Correct Answer: D

Question 4

In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.

A. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server's root account. B. Configure the CPM to allow SSH logins. C. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account. D. Configure the Unix system to allow SSH logins.

Correct Answer: C

Question 5

Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

A. Export Vault Data (EVD) B. Accounts Discovery C. Auto Detection (AD) D. On Demand Privileges Manager (OPM) E. Discovery and Audit (DMA)

Correct Answer: B,C,E

Question 6

You need to move a platform from using PMTerminal to using Terminal Plugin Controller (TPC) What must you do?

A. Within PVWA
Click Administration > Platform Management
Select the platform and then click Edit.
In the left pane, click Automatic Password Management > CPM Plug-in
Set the ExeName parameter value to CyberArk TPC exe B. It is not possible to change a platform from using PMTerminal to using TPC You must locate a new version of the platform that supports TPC and import the new platform over-writing the existing platform C. Using PnvateArk. select the PasswordManager_Shared safe, and then select open Locate the mi file relating to the platform you wish to change and double click At the bottom of the file, insert a line "UseTPC = True" Remove any lines that reference "PMTerminal" and save Return the mi file to the safe Restart CPM for this change to take effect D. Open the process file of the platform you wish to configure to use TPC Add the following parameter under the States section; "use TPC=yes"

Correct Answer: A

Question 7

What is the purpose of a linked account?

A. To ensure a particular set of accounts all change at the same time. B. To allow more than one account to work together as part of a password management process. C. To connect the CPNI to a target system. D. To ensure that a particular collection of accounts all have the same password.

Correct Answer: B

Question 8

Which usage can be added as a service account platform?

A. Kerberos Tokens B. Loosely Connected Devices C. IIS Application Pools D. PowerShell Libraries

Correct Answer: B

Question 9

If a customer has one data center and requires high availability, how many PVWA's should be deployed.

A. Two PVWA Cluster B. One PVWA cluster C. Two D. One

Correct Answer: C

Question 10

Which report could show all accounts that are past their expiration dates?

A. Application Inventory report B. Privileged Account Inventory report C. Activity log D. Privileged Account Compliance Status report

Correct Answer: D

Question 11

What is the purpose of the Interval setting in a CPM policy?

A. To control how long the CPM rests between password changes. B. To control how often the CPM looks for User Initiated CPM work. C. To control how often the CPM looks for System Initiated CPM work. D. To control the maximum amount of time the CPM will wait for a password change to complete.

Correct Answer: C

CyberArk CDE Recertification - PAM-CDE-RECERT Exam Practice Test