CyberArk PAM-CDE-RECERT Exam Questions Instant Access

Question 1

Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

ATRUE

BFALSE

Answer : A

Question 2

For a safe with Object Level Access enabled you can turn off Object Level Access Control when it no longer needed on the safe.

ATRUE

BFALSE

Answer : B

Question 3

A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request.

What is the correct location to identify users or groups who can approve?

APVWA> Administration > Platform Configuration > Edit Platform > UI&Workflow > Dual Control> Approvers

BPVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests

CPVWA> Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers

DPrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)

Answer : B

Question 4

You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account's password the CPM will.....

ALog in to the system as root, then change root's password

BLog in to the system as the logon account, then change roofs password

CLog in to the system as the logon account, run the su command to log in as root, and then change root's password.

DNone of these

Answer : C

Question 5

What is a prerequisite step betore CyberArk can be configured to support RADIUS authentication?

ALog on to the PrivateArk Client display the User properties to the user to configure, run the Authentication method dropdown list and select Radius authentication.

BIn the RADIUS server define the CyberArk Vault as a RADIUS client/agent

CIn the Vault installation folder, run CAVaultManager as administrator with the SecureSecretFiles command

DNavigate to /Server/Conf and open DBParm mi and set the RadiusServerslnfo parameter

Answer : B

Question 6

You have been asked to turn off the time access restrictions for a safe.

Where is this setting found?

APrivateArk

BRestAPI

CPassword Vault Web Access (PVWA)

DVault

Answer : A

Question 7

Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

APassword change

BPassword reconciliation

CSession suspension

DSession termination

Answer : A

CyberArk CDE Recertification PAM-CDE-RECERT Exam Questions