
Verified PAM-CDE-RECERT dumps Q&As - 100% Pass from Exams-boost
Pass PAM-CDE-RECERT Exam in First Attempt Guaranteed 2022 Dumps!
NEW QUESTION 33
Which of the following components can be used to create a tape backup of the Vault?
- A. High Availability
- B. Distributed Vaults
- C. Disaster Recovery
- D. Replicate
Answer: D
NEW QUESTION 34
Which is the purpose of the allowed Safes parameter in a Central Policy Manager (CPM) policy? (Choose two.)
- A. To allow users to access only the passwords they should be able to access
- B. To prevent accidental use of a policy in the wrong Safe
- C. To improve performance by reducing CPM workload
- D. To enforce Least Privilege in CyberArk
Answer: A,C
NEW QUESTION 35
When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.
- A. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file.
- B. True, this is the default behavior.
- C. True, if the AllowFailback setting is set to "yes" in the padr.ini file.
- D. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the dbparm.ini file.
Answer: B
NEW QUESTION 36
Which user is automatically added to all Safes and cannot be removed?
- A. Operator
- B. Administrator
- C. Master
- D. Auditor
Answer: C
NEW QUESTION 37
When working with the CyberArk High Availability Cluster, which services are running on the passive node?
- A. Cluster Vault Manager, PrivateArk Database and Remote Control Agent
- B. Cluster Vault Manager and Remote Control Agent
- C. Cluster Vault Manager
- D. Cluster Vault Manager and PrivateArk Database
Answer: C
NEW QUESTION 38
What is the purpose of EVD?
- A. To extract vault metadata into an open database platform.
- B. To create a backup of the MySQL database.
- C. To allow editing of vault metadata.
- D. To extract audit data from the vault.
Answer: A
NEW QUESTION 39
Which of the following is NOT a use case for installing multiple Central Policy Managers (CPM)?
- A. Accounts are managed in multiple sites or VLANs protected by firewall.
- B. Provide load-balancing capabilities when managing passwords on target devices.
- C. Reduce network traffic across WAN links.
- D. A single CPM cannot accommodate the total number of accounts managed.
Answer: D
NEW QUESTION 40
Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the target email server during Simple Mail Transfer Protocol (SMTP) integration?
- A. PVWA > Options > Notification Settings
- B. PVWA > Administration > Notification Settings
- C. PVWA > Platform Management > Notification Settings
- D. PVWA > LDAP Integration > Notification Settings
Answer: B
NEW QUESTION 41
The PSM requires the Remote Desktop Web Access role service.
- A. True
- B. False
Answer: A
NEW QUESTION 42
Which of the following Privileged Session Management (PSM) solutions currently supports PKI authentication?
- A. All of the above
- B. PSM (i.e., launching connections by clicking on the connect button in the PVWA)
- C. PSM for Windows (previously known as RDP Proxy)
- D. PSM for SSH (previously known as PSM-SSH Proxy)
Answer: A
NEW QUESTION 43
A Security Information and Event Management (SIEM) integration is a powerful way to correlate privileged account usage with privileged account activity.
- A. True
- B. False
Answer: A
NEW QUESTION 44
Which of the following Privileged Session Management (PSM) solutions provide a detailed audit log of session activities?
- A. PSM for Windows (previously known as RDP Proxy)
- B. All of the above
- C. PSM (i.e., launching connections by clicking on the connect button in the PVWA)
- D. PSM for SSH (previously known as PSM-SSH Proxy)
Answer: A
NEW QUESTION 45
What is the purpose of the CyberArk Event Notification Engine service?
- A. It sends email messages from the Central Policy Manager (CPM).
- B. It processes audit report messages.
- C. It sends email messages from the Vault.
- D. It makes Vault data available to components.
Answer: C
NEW QUESTION 46
Any user can monitor live sessions in real time when initiating RDP connection via Secure Connect through PSM.
- A. True
- B. False
Answer: B
NEW QUESTION 47
Which is the purpose of a linked account?
- A. To ensure a particular set of accounts all change at the same time.
- B. To allow the use of additional passwords within a password management process.
- C. To ensure that a particular collection of accounts all have the same password.
- D. To connect the CPM to a target system.
Answer: A
NEW QUESTION 48
Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the domain controller during LDAP/S integration?
- A. PVWA > Administration > LDAP Integration
- B. PVWA > Platform Management > LDAP Integration
- C. PVWA > Administration > Options > LDAP Integration
- D. PVWA > LDAP Integration
Answer: A
NEW QUESTION 49
To support a fault tolerant and high-availability architecture, the Password Vault Web Access (PVWA) servers must to be configured to communicate with the Primary Vault and Satellite Vaults.
Which file needs to be changed on the PVWA to enable this setup?
- A. dbparm.ini
- B. Satellite.ini
- C. pvwa.ini
- D. Vault.ini
Answer: D
NEW QUESTION 50
When creating an onboarding rule, it will be executed upon __________.
- A. any future accounts discovered by a discovery process
- B. all accounts in the pending accounts list and any future accounts discovered by a discovery process
- C. all accounts in the pending accounts list
Answer: A
NEW QUESTION 51
In a Simple Network Management Protocol (SNMP) integration it is recommended to use the Fully Qualified Domain Name (FQDN) when specifying the SNMP server address(es).
- A. True
- B. False
Answer: B
NEW QUESTION 52
PSM for SSH (previously known as PSM-SSH Proxy) supports connections to which of the following target systems?
- A. Oracle
- B. All of the above
- C. Unix
- D. Windows
Answer: C
NEW QUESTION 53
When managing SSH keys, the Central Policy Manager (CPM) stores the private key __________.
- A. in the Vault and on the target server
- B. in the Vault
- C. on the target server
- D. nowhere because the private key can always be generated from the public key
Answer: B
NEW QUESTION 54
......
PAM-CDE-RECERT Dumps Full Questions - Exam Study Guide: https://testking.exams-boost.com/PAM-CDE-RECERT-valid-materials.html