Free CyberArk CDE Recertification Exam PAM-CDE-RECERT Exam Practice Test

Your organization has a requirement to allow users to “check out passwords” and connect to targets with the same account through the PSM. What needs to be configured in the Master policy to ensure this will happen?

• Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active
• Enforce check-in/check-out exclusive access = inactive; Require privileged session monitoring and isolation = inactive
• Enforce check-in/check-out exclusive access = inactive; Record and save session activity = active
• Enforce check-in/check-out exclusive access = active; Record and save session activity = inactive

To manage automated onboarding rules, a CyberArk user must be a member of which group?

• Vault Admins
• CPM User
• Auditors
• Administrators

To enable the Automatic response “Add to Pending” within PTA when unmanaged credentials are found, what are the minimum permissions required by PTAUser for the PasswordManager_pending safe?

• List Accounts, View Safe members, Add accounts (includes update properties), Update Account content, Update Account properties
• List Accounts, Add accounts (includes update properties), Delete Accounts, Manage Safe
• Add accounts (includes update properties), Update Account content, Update Account properties, View Audit
• View Accounts, Update Account content, Update Account properties, Access Safe without confirmation, Manage Safe, View Audit

Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

• Suspected credential theft
• Over-Pass-The-Hash
• Golden Ticket
• Unmanaged privileged access

Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply.

• PSM connections to target devices that are not managed by CyberArk.
• Session Recording.
• Real-time live session monitoring.
• PSM connections from a terminal without the need to login to the PVWA.

If a customer has one data center and requires high availability, how many PVWA's should be deployed.

• Two
• One PVWA cluster
• One
• Two PVWA Cluster

Which report provides a list of account stored in the vault.

• Privileged Accounts Inventory
• Privileged Accounts Compliance Status
• Entitlement Report
• Active Log

A Reconcile Account can be specified in the Master Policy.

• TRUE
• FALSE

What is the purpose of the PrivateArk Database service?

• Communicates with components
• Sends email alerts from the Vault
• Executes password changes
• Maintains Vault metadata

When onboarding multiple accounts from the Pending Accounts list, which associated setting must be the same across the selected accounts?

• Platform
• Connection Component
• CPM
• Vault