Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free CyberArk PAM-CDE-RECERT Practice Exam with Questions & Answers | Set: 2

Questions 11

A customer installed multiple PVWAs in the production environment behind a load balancer VIP. They subsequently observed that all incoming traffic from the load balancer VIP goes to only one PVWA, even though all the PVWAs are up and running. What could be the likely cause of this situation?

Options:
A.

The load balancing algorithm is the least connections algorithm.

B.

The Certificate of the load balancer is not a wild card cert

C.

The load balancing pool only has one PVWA server

D.

SSL passthrough is not configured on the load balancer.

Questions 12

Which Automatic Remediation is configurable for a PTA detection of a “Suspected Credential Theft”?

Options:
A.

Add to Pending

B.

Rotate Credentials

C.

Reconcile Credentials

D.

Disable Account

Questions 13

To enable the Automatic response “Add to Pending” within PTA when unmanaged credentials are found, what are the minimum permissions required by PTAUser for the PasswordManager_pending safe?

Options:
A.

List Accounts, View Safe members, Add accounts (includes update properties), Update Account content, Update Account properties

B.

List Accounts, Add accounts (includes update properties), Delete Accounts, Manage Safe

C.

Add accounts (includes update properties), Update Account content, Update Account properties, View Audit

D.

View Accounts, Update Account content, Update Account properties, Access Safe without confirmation, Manage Safe, View Audit

Questions 14

A Logon Account can be specified in the Master Policy.

Options:
A.

TRUE

B.

FALSE

Questions 15

You are installing multiple PVWAs behind a load balancer. Which statement is correct?

Options:
A.

Port 1858 must be opened between the load balancer and the PVWAs

B.

The load balancer must be configured in DNS round robin.

C.

The load balancer must support "sticky sessions".

D.

The LoadBalancerClientAddressHeader parameter in the PVwA.ini file must be set.

Questions 16

To manage automated onboarding rules, a CyberArk user must be a member of which group?

Options:
A.

Vault Admins

B.

CPM User

C.

Auditors

D.

Administrators

Questions 17

The primary purpose of exclusive accounts is to ensure non-repudiation (Individual accountability).

Options:
A.

TRUE

B.

FALS

Questions 18

The Password upload utility can be used to create safes.

Options:
A.

TRUE

B.

FALS

Questions 19

Platform settings are applied to _________.

Options:
A.

The entire vault.

B.

Network Areas

C.

Safes

D.

Individual Accounts

Questions 20

A Vault Administrator team member can log in to CyberArk, but for some reason, is not given Vault Admin rights.

Where can you check to verify that the Vault Admins directory mapping points to the correct AD group?

Options:
A.

PVWA > User Provisioning > LDAP Integration > Mapping Criteria

B.

PVWA > User Provisioning > LDAP Integration > Map Name

C.

PVWA > Administration > LDAP Integration > Mappings

D.

PVWA > Administration > LDAP Integration > AD Groups