2022 Free CyberArk PAM-CDE-RECERT Exam Files Downloaded Instantly [Q24-Q42]

NO.24 Which of the following is considered a prerequisite for installing PSM?

IIS web services role

HTML5 Gateway

Provider

Remote Desktop Services

NO.25 For a Safe with object level access control enabled the Vault administrator is able to turn off object level access control when it no longer needed on the Safe.

True

False

NO.26 When the PSM Gateway (also known as the HTML5 Gateway) is implemented, users must have an RDP client, such as MSTSC, installed on their endpoint in order to launch connections via the PSM.

True

False. When the PSM Gateway is implemented, the user only requires a browser in order launch a connection via the PSM.

NO.27 Which of the following is NOT a use case for installing multiple Central Policy Managers (CPM)?

A single CPM cannot accommodate the total number of accounts managed.

Accounts are managed in multiple sites or VLANs protected by firewall.

Reduce network traffic across WAN links.

Provide load-balancing capabilities when managing passwords on target devices.

NO.28 The Vault needs to send Simple Network Management Protocol (SNMP) traps to the SNMP solution.
Which file is used to configure the IP address of the SNMP server?

snmp.ini

dbparm.ini

ENEConf.ini

PARagent.ini

NO.29 What is the purpose of the password verify process?

To test that CyberArk is storing accurate credentials for accounts.

To change the password of an account according to organizationally defined password rules.

To allow CyberArk to manage unknown or lost credentials.

To generate a new complex password.

NO.30 Which file does the Vault administrator need to edit in order to configure the integration of the Vault with the radius server?

radius.ini

PARagent.ini

ENEConf.ini

dbparm.ini

NO.31 Which is the purpose of the allowed Safes parameter in a Central Policy Manager (CPM) policy? (Choose two.)

To improve performance by reducing CPM workload

To prevent accidental use of a policy in the wrong Safe

To allow users to access only the passwords they should be able to access

To enforce Least Privilege in CyberArk

NO.32 What is the proper way to allow the Vault to resolve host names?

Define a DNS server.

Define a WINS server.

Define the local hosts file.

The Vault cannot resolve host names due to security standards.

NO.33 Which of the following features are provided by Ad-Hoc Access (formerly Secure Connect)? (Choose three.)

PSM connections to target devices that are not managed by CyberArk

session recording

real-time live session monitoring

PSM connections from a terminal without the need to login to the Password Vault Web Access (PVWA)

NO.34 The PSM requires the Remote Desktop Web Access role service.

True

False

NO.35 The DR module allows an integration with enterprise backup software.

True

False

NO.36 What is the purpose of the CyberArk Event Notification Engine service?

It sends email messages from the Central Policy Manager (CPM).

It sends email messages from the Vault.

It processes audit report messages.

It makes Vault data available to components.

NO.37 The password upload utility must run from the Central Policy Manager (CPM) server.

True

False

NO.38 What is the purpose of EVD?

To extract vault metadata into an open database platform.

To allow editing of vault metadata.

To create a backup of the MySQL database.

To extract audit data from the vault.

NO.39 When a DR Vault Server becomes an active vault, it will automatically fail back to the original state once the Primary Vault comes back online.

True, this is the default behavior.

False, this is not possible.

True, if the AllowFailback setting is set to “yes” in the padr.ini file.

True, if the AllowFailback setting is set to “yes” in the dbparm.ini file.

NO.40 Which parameter controls how often the Central Policy Manager (CPM) looks for soon-to-be-expired passwords that need to be changed?

HeadStartInterval

Interval

ImmediateInterval

The CPM does not change the password under this circumstance.

NO.41 After the Vault server is installed, the Microsoft Windows firewall is now commandeered by the Vault.
Can the administrator change these firewall rules?

Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the Vault.

Yes, the administrator can still modify firewall rules via the Windows firewall interface.

No, the Vault does not permit any changes to the firewall due to security requirements.

Yes, but the administrator can only modify the firewall rules by editing the FirewallRules.ini file and the restarting the Vault.

NO.42 Which onboarding method is used to integrate CyberArk with the accounts provisioning process?

Accounts Discovery

Auto Detection

Onboarding RestAPI functions

PTA rules

2022 Free CyberArk PAM-CDE-RECERT Exam Files Downloaded Instantly [Q24-Q42]

Leave a Reply Cancel reply

PAM-CDE-RECERT Practice Tests

Related Certifications

Recent Posts

Categories

Archives