Question 1
What is the primary purpose of Dual Control?
Correct Answer:
D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.
Free CyberArk CDE Recertification PAM-CDE-RECERT Exam Questions
Question 2
Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?
Correct Answer:
B. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.
Question 3
In a default CyberArk installation, which group must a user be a member of to view the ''reports'' page in PVWA?
Correct Answer:
A. PVWAMonitor
Question 4
A customer's environment three data centers, consisting of 5,000 servers in Germany, 10,000 servers in Canada, 1,500 servers in Singapore. You want to manage target servers and avoid complex firewall rules. How many CPM's should you deploy?
Correct Answer:
B. 3, total, 1 per data center
Question 5
A Reconcile Account can be specified in the Master Policy.
Correct Answer:
B. FALSE
Question 6
Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.
Correct Answer:
B. FALSE
Question 7
You are logging into CyberArk as the Master user to recover an orphaned safe.
Which items are required to log in as Master?
Correct Answer:
A. Master CD, Master Password, console access to the Vault server, Private Ark Client
Question 8
When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA) and receive approval before being able to launch a secure connection via PSM for Windows (previously known as RDP Proxy).
Correct Answer:
B. False, a user can submit the request after the connection has already been initiated via the PSM for Windows
Question 9
Which permissions are needed for the Active Directory user required by the Windows Discovery process?
Correct Answer:
A. Domain Admin
Question 10
What is the configuration file used by the CPM scanner when scanning UNIX/Linux devices?
Correct Answer:
A. UnixPrompts.ini
Question 11
What is the purpose of the PrivateArk Database service?
Correct Answer:
D. Maintains Vault metadata
Question 12
PSM for Windows (previously known as ''RDP Proxy'') supports connections to the following target systems
Correct Answer:
A. Windows
Question 13
SAFE Authorizations may be granted to____________.
Select all that apply.
Correct Answer:
A. Vault Users; B. Vault Group; C. LDAP Users; D. LDAP Groups
Question 14
Which item is an option for PSM recording customization?
Correct Answer:
B. Windows events text recorder and universal keystrokes recording simultaneously
Question 15
The vault supports Subnet Based Access Control.
Correct Answer:
A. TRUE