PAM-CDE-RECERT Exam Dumps - CyberArk CDE Recertification

Password change

Password reconciliation

Session suspension

Session termination

Require privileged session monitoring and isolation = inactive; Record and save session activity = active.

Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive.

Require privileged session monitoring and isolation = active; Record and save session activity = active.

Require privileged session monitoring and isolation = active; Record and save session activity = inactive.

Private Ark Client > Tools > Administrative Tools > Directory Mapping > Vault Authorizations

Private Ark Client > Tools > Administrative Tools > Users and Groups > Auditors > Authorizations tab

PVWA User Provisioning > LDAP integration > Vault Auditors Mapping > Vault Authorizations

PVWA> Administration > Configuration Options > LDAP integration > Vault Auditors Mapping > Vault Authorizations

UnixPrompts.ini

plink.exe

dbparm.ini

PVConfig.xml

Audit Users and Add Network Areas

Audit Users and Manage Directory Mapping

Audit Users and Add/Update Users

Audit Users and Activate Users

Vault Users

Vault Groups

LDAP Users

LDAP Groups

Discovery and Audit (DMA)

Auto Detection (AD)

Export Vault Data (EVD)

On Demand Privileges Manager (OPM)

Accounts Discovery

Store the CD in a physical safe and mount the CD every time Vault maintenance is performed

Copy the entire contents of the CD to the system Safe on the Vault

Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions

Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions

PAR Agent

PrivateArk Server Central Administration

Edit DBParm.ini in a text editor.

Setup.exe

PSM-SSH Connection Component

UnixPrompts.ini

UnixProcess.ini

PSM-RDP Connection Component

PSM connections to target devices that are not managed by CyberArk.

Session Recording

Real-time live session monitoring.

PSM connections from a terminal without the need to login to the PVWA

TRUE

FALSE

Accounts Discovery

Detecting accounts with PTA

A Rest API integration with account provisioning software

A DNA scan

True

False

Vault Admins

CPM User

Auditors

Administrators

Accounts Discovery

Auto Detection

Onboarding RestAPI functions

PTA Rules

on the Vault server in Windows\System32\Etc\Hosts and in the PVWA Application under Administration > LDAP Integration > Directories > Hosts

on the Vault server in Windows\System32\Etc\Hosts and on the PVWA server in Windows\System32\Etc\Hosts

in the Private Ark client under Tools > Administrative Tools > Directory Mapping

on the Vault server in the certificate store and on the PVWA server in the certificate store

Credentials stored in the Vault for the target machine

Shadowuser

PSMConnect

PSMAdminConnect

TRUE

FALS

Accounts that were discovered by CyberArk in the last 30 days

Accounts that were discovered by CyberArk that have not yet been onboarded

All accounts added to the vault in the last 30 days

All users added to CyberArk in the last 30 days

True.

False. Because the user can also enter credentials manually using Secure Connect.

False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSM Connect.

False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

TRUE

FALSE

You must specify an existing Safe where are account will be stored when it is on boarded to the Vault

You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.

You can specify the name of a new Platform that will be created and associated with the account

Any account that is on boarded can be automatically reconciled regardless of the platform it is associated with.

Create an exception to the Master Policy to exclude the group from the workflow process.

Edith the master policy rule and modify the advanced’ Access safe without approval’ rule to include the group.

On the safe in which the account is stored grant the group the’ Access safe without audit’ authorization.

On the safe in which the account is stored grant the group the’ Access safe without confirmation’ authorization.

Performs IIS hardening: Imports the CyberArk INF configuration

Performs IIS hardening: Configures all group policy settings

Performs IIS hardening: Renames the local Administrator Account

Configures Windows Firewall: Removes all installation files.

Administrator

Any member of Vault administrators

Any member of auditors

Master

From PrivateArk, copy/paste the appropriate Policy.ini file; then rename it.

From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.

From PrivateArk, copy/paste the appropriate settings in PVConfiguration.xml; then update the policyName variable.

From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click “Save as” INSTEAD of save to duplicate and rename the platform.

1

2

3

4