Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
CyberArk
CyberArk CDE Certification
PAM-CDE-RECERT
CyberArk CDE Recertification Questions and Answers

Pass the CyberArk CDE Certification PAM-CDE-RECERT Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam PAM-CDE-RECERT Premium Access

View all detail and faqs for the PAM-CDE-RECERT exam

Go to Exam

718 Students Passed

85% Average Score

98% Same Questions

Viewing page 2 out of 7 pages

Viewing questions 11-20 out of questions

Questions # 11:

Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile Utility? (Choose three.)

Options:

Operating System Username

Host IP Address

Client Hostname

Operating System Type (Linux/Windows/HP-UX)

Vault IP Address

Time Frame

Answer

A, B, C

Explanation

[Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/CreateCredFile-Utility.htm, ]

Questions # 12:

For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

Options:

Create an exception to the Master Policy to exclude the group from the workflow process.

Edith the master policy rule and modify the advanced’ Access safe without approval’ rule to include the group.

On the safe in which the account is stored grant the group the’ Access safe without audit’ authorization.

On the safe in which the account is stored grant the group the’ Access safe without confirmation’ authorization.

Answer

Questions # 13:

Which pre-requisite step must be completed before installing a Vault?

Options:

Join the server to the domain

install a clean operating system

install anti-virus software

Copy the master CD to a folder on the Vault server

Answer

Questions # 14:

Match each permission to where it can be found.

Question # 14

Options:

Answer

Answer:

Explanation

[Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Safes-add-a-safe-member.htm?TocPath=Administration%7CPrivileged%20Accounts%7CAccess%20Control%7CSafes%20and%20Safe%20members%7C_____3, ]

Questions # 15:

What is the purpose of the HeadStartlnterval setting m a platform?

Options:

It determines how far in advance audit data is collected tor reports

It instructs the CPM to initiate the password change process X number of days before expiration.

It instructs the AIM Provider to ‘skip the cache' during the defined time period

It alerts users of upcoming password changes x number of days before expiration.

Answer

Explanation

The number of days before the password expires (according to the ExpirationPeriod parameter) that the CPM will initiate a password change process. This parameter is not relevant if the policy will be applied to a member of an account group.

Questions # 16:

Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply.

Options:

PSM connections to target devices that are not managed by CyberArk.

Session Recording.

Real-time live session monitoring.

PSM connections from a terminal without the need to login to the PVWA.

Answer

A, B, C

Questions # 17:

Which of these accounts onboarding methods is considered proactive?

Options:

Accounts Discovery

Detecting accounts with PTA

A Rest API integration with account provisioning software

A DNA scan

Answer

Questions # 18:

You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.

How should this be configured to allow for password management using least privilege?

Options:

Configure each CPM to use the correct logon account.

Configure each CPM to use the correct reconcile account.

Configure the UNIX platform to use the correct logon account.

Configure the UNIX platform to use the correct reconcile account.

Answer

Explanation

[Reference:https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/PASIMP/Linked-PAS-Accounts.htm#Overview, ]

Questions # 19:

You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe Team1.

What do you need to recover and decrypt the object? (Choose three.)

Options:

Recovery Private Key

Recover.exe

Vault data

Recovery Public Key

Server Key

Master Password

Answer

A, D, E

Explanation

[Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Server-Keys.htm?TocPath=Administration%7CComponents%7CDigital%20Vault%7CAdvanced%20Digital%20Vault%20Environment%7CCyberArk%20Vault%20Structure%7C_____3, ]

Questions # 20:

Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?