Question 1

For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

Options :

A : Create an exception to the Master Policy to exclude the group from the workflow process.

B : Edith the master policy rule and modify the advanced’ Access safe without approval’ rule to include the group.

C : On the safe in which the account is stored grant the group the’ Access safe without audit’ authorization.

D : On the safe in which the account is stored grant the group the’ Access safe without confirmation’ authorization.

Answer: D

Question 2

The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys. How are these keys managed?

Options :

A : CyberArk stores Private keys in the Vault and updates Public keys on target systems.

B : CyberArk stores Public keys in the Vault and updates Private keys on target systems.

C :

CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.

D : CyberArk stores both Private and Public keys and can update target systems with either key.

Answer: A

Question 3

After installing the first PSM server and before installing additional PSM servers, you must ensure the user performing the installation is not a direct owner of which safe?

Options :

A : PSMUnmanagedSessionAccounts Safe

B : PSMRecordingsSessionAccounts Safe

C : PSMUnmanagedApplicationAccounts Safe

D : PSMSessionBackupAccounts Safe

Answer: A

Question 4

Secure Connect provides the following. Choose all that apply.

Options :

A : PSM connections to target devices that are not managed by CyberArk.

B : Session Recording

C : Real-time live session monitoring.

D : PSM connections from a terminal without the need to login to the PVWA

Answer: A,B

Question 5

Your customer has five main data centers with one PVWA in each center under different URLs. How can you make this setup fault tolerant?

Options :

A : This setup is already fault tolerant

B : Install more PVWAs in each data center

C : Continuously monitor PVWA status and send users the link to another PVWA if issues are encountered

D : Load balance all PVWAs under same urL

Answer: D

Higher Test Marks with Free Online PAM-CDE-RECERT Exam Practice

Buying Options: