Exit demo PAM-CDE-RECERT CyberArk CDE Recertification PDF format · free preview

CyberArk PAM-CDE-RECERT - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/pam-cde-recert.html

Question 1
Single choice

A newly created platform allows users to access a Linux endpoint. When users click to connect, nothing happens.

Which piece of the platform is missing?

A.

PSM-SSH Connection Component

B.

UnixPrompts.ini

C.

UnixProcess.ini

D.

PSM-RDP Connection Component

Question 2
Multiple choice

You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe Team1.

What do you need to recover and decrypt the object? (Choose three.)

A.

Recovery Private Key

B.

Recover.exe

C.

Vault data

D.

Recovery Public Key

E.

Server Key

F.

Master Password

Question 3
Single choice

CyberArk recommends implementing object level access control on all Safes.

A.

True

B.

False

Question 4
Single choice

In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

A.

True.

B.

False. Because the user can also enter credentials manually using Secure Connect.

C.

False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSM Connect.

D.

False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

Question 5
Single choice

Which of these accounts onboarding methods is considered proactive?

A.

Accounts Discovery

B.

Detecting accounts with PTA

C.

A Rest API integration with account provisioning software

D.

A DNA scan

Question 6
Single choice

CyberArk user Neil is trying to connect to the Target Linux server 192.168.1.64 using a domain account ACME/linuxuser01 on Domain Acme.corp using PSM for SSH server 192.168.65.145.

What is the correct syntax?

A.

Ssh neil@linuxuser01:[email protected]@192.168.1.45

B.

Ssh neil@linuxuser01#[email protected]@192.168.1.45

C.

Ssh neil@[email protected]@192.168.65.145

D.

Ssh neil@[email protected]@[email protected]

Question 7
Single choice

A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication.

Which locations must you update?

A.

on the Vault server in Windows\System32\Etc\Hosts and in the PVWA Application under Administration
> LDAP Integration > Directories > Hosts

B.

on the Vault server in Windows\System32\Etc\Hosts and on the PVWA server in Windows\System32
\Etc\Hosts

C.

in the Private Ark client under Tools > Administrative Tools > Directory Mapping

D.

on the Vault server in the certificate store and on the PVWA server in the certificate store

Question 8
Single choice

A Logon Account can be specified in the Master Policy.

A.

TRUE

B.

FALSE

Question 9
Single choice

A customer is moving from an on-premises to a public cloud deployment.

What is the best and most cost-effective option to secure the server key?

A.

Install the Vault in the cloud the same way that you would in an on-premises environment Place the server key in a password protected folder on the operating system

B.

Install the Vault in the cloud the same way that you would in an on-premises environment Purchase a Hardware Security Module to secure the server key

C.

Install the Vault using the Amazon Machine Images and secure the server key using native cloud Key Management Systems

D.

Install the Vault using the Amazon Machine Images and secure the server key with a Hardware Security Module

Question 10
Single choice

A user with administrative privileges to the vault can only grant other users privileges that he himself has.

A.

TRUE

B.

FALSE

Showing 10 of 221 questions · Unlock the full set