Free CyberArk CDE Recertification Exam PAM-CDE-RECERT Exam Practice Test

Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

• TRUE
• FALSE

PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

• True
• False, the PTA can suspend sessions whether the session is made via the PSM or not

What is the easiest way to duplicate an existing platform?

• From PrivateArk, copy/paste the appropriate Policy.ini file: then rename it.
• from the PVWA, navigate to the platforms page, select the existing platform that is similar to the new target account platform and click Duplicate, name the new platform.
• From PrivateArk, cop/paste the appropriate setting in the PVConfiguration.xml then update the policName variable.
• From the PVWA, navigate to the platforms page, select existing platform that is similar to the new target account platform, manually update the platform settings and click "Save as" instead of save to duplicate and rename the platform.

An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?

• PSMConnect
• PSMMaster
• PSMGwUser
• PSMAdminConnect

A Logon Account can be specified in the Master Policy.

• TRUE
• FALSE

Within the Vault each password is encrypted by:

• the server key
• the recovery public key
• the recovery private key
• its own unique key

Which of the following PTA detections are included in the Core PAS offering?

• Suspected Credential Theft
• Over-Pass-The Hash
• Golden Ticket
• Unmanaged Privileged Access

A Vault administrator have associated a logon account to one of their Unix root accounts in the vault. When attempting to verify the root account’s password the Central Policy Manager (CPM) will:

• ignore the logon account and attempt to log in as root
• prompt the end user with a dialog box asking for the login account to use
• log in first with the logon account, then run the SU command to log in as root using the password in the Vault
• none of these

Which report shows the accounts that are accessible to each user?

• Activity report
• Entitlement report
• Privileged Accounts Compliance Status report
• Applications Inventory report

It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

• TRUE
• FALS