PAM-CDE-RECERT Online Practice Questions and Answers

You are installing multiple PVWAs behind a load balancer. Which statement is correct?

A. Port 1858 must be opened between the load balancer and the PVWAs

B. The load balancer must be configured in DNS round robin.

C. The load balancer must support "sticky sessions".

D. The LoadBalancerClientAddressHeader parameter in the PVwA.ini file must be set.

How does the Vault administrator apply a new license file?

A. Upload the license.xml file to the system Safe and restart the PrivateArk Server service

B. Upload the license.xml file to the system Safe

C. Upload the license.xml file to the Vault Internal Safe and restart the PrivateArk Server service

D. Upload the license.xml file to the Vault Internal Safe

If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

A. Configure the Provider to change the password to match the Vault's Password

B. Associate a reconcile account and configure the platform to reconcile automatically

C. Associate a logon account and configure the platform to reconcile automatically

D. Run the correct auto detection process to rediscover the password

What is a requirement for setting fault tolerance for PSMs?

A. Use a load balancer

B. use a backup solution

C. CPM must be in all data centers

D. Install the Vault in an HA Cluster

Users can be resulted to using certain CyberArk interfaces (e.g.PVWA or PACLI).

A. TRUE

B. FALS

What is a prerequisite step before CyberArk can be configured to support RADIUS authentication?

A. Log on to the PrivateArk Client, display the user properties of the user to configure, run the Authentication method drop-down list, and select RADIUS authentication.

B. In the RADIUS server, define the CyberArk Vault as RADIUS client/agent.

C. In the Vault Installation folder, run CAVaultManger as Administrator with the SecureSecretFiles command.

D. Navigate to /Server/Conf and open DBParms.ini and set the RadiusServersInfo parameter.

Which one the following reports is NOT generated by using the PVWA?

A. Accounts Inventory

B. Application Inventory

C. Sales List

D. Convince Status

One can create exceptions to the Master Policy based on ____________________.

A. Safes

B. Platforms

C. Policies

D. Accounts

You need to enable the PSM for all platforms.

Where do you perform this task?

A. Platform Management > (Platform) > UI and Workflows

B. Master Policy > Session Management

C. Master Policy > Privileged Access Workflows

D. Administration > Options > Connection Components

In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

A. True.

B. False. Because the user can also enter credentials manually using Secure Connect.

C. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSM Connect.

D. False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.