Weekend Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale65best

Free CyberArk PAM-CDE-RECERT Practice Exam with Questions & Answers

Questions 1

Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.

Options:
A.

HeadStartInterval

B.

Interval

C.

ImmediateInterval

D.

The CPM does not change the password under this circumstance

Questions 2

When onboarding multiple accounts from the Pending Accounts list, which associated setting must be the same across the selected accounts?

Options:
A.

Platform

B.

Connection Component

C.

CPM

D.

Vault

Questions 3

Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)

Options:
A.

Store the CD in a physical safe and mount the CD every time Vault maintenance is performed

B.

Copy the entire contents of the CD to the system Safe on the Vault

C.

Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions

D.

Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions

Questions 4

Match the connection component to the corresponding OS/Function.

PAM-CDE-RECERT Question 4

Options:
Questions 5

Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.

Options:
A.

TRUE

B.

FALSE

Questions 6

Within the Vault each password is encrypted by:

Options:
A.

the server key

B.

the recovery public key

C.

the recovery private key

D.

its own unique key

Questions 7

Your organization requires all passwords be rotated every 90 days.

Where can you set this regulatory requirement?

Options:
A.

Master Policy

B.

Safe Templates

C.

PVWAConfig.xml

D.

Platform Configuration

Questions 8

The vault supports Role Based Access Control.

Options:
A.

TRUE

B.

FALSE

Questions 9

You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe Team1.

What do you need to recover and decrypt the object? (Choose three.)

Options:
A.

Recovery Private Key

B.

Recover.exe

C.

Vault data

D.

Recovery Public Key

E.

Server Key

F.

Master Password

Questions 10

It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

Options:
A.

TRUE

B.

FALS