PAM-CDE-RECERT Online Practice Questions and Answers

You receive this error:

"Error in changepass to user domain\user on domain server(\domain.(winRc=5) Access is denied."

Which root cause should you investigate?

A. The account does not have sufficient permissions to change its own password.

B. The domain controller is unreachable.

C. The password has been changed recently and minimum password age is preventing the change.

D. The CPM service is disabled and will need to be restarted.

How much disk space do you need on the server for a PAReplicate?

A. 500 GB

B. 1 TB

C. same as disk size on Satellite Vault

D. same as disk size on Primary Vault

The password upload utility must run from the CPM server

A. TRUE

B. FALSE

When on-boarding account using Accounts Feed, Which of the following is true?

A. You must specify an existing Safe where are account will be stored when it is on boarded to the Vault

B. You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.

C. You can specify the name of a new Platform that will be created and associated with the account

D. Any account that is on boarded can be automatically reconciled regardless of the platform it is associated with.

The primary purpose of exclusive accounts is to ensure non-repudiation (Individual accountability).

A. TRUE

B. FALS

What is the purpose of the PrivateArk Database service?

A. Communicates with components

B. Sends email alerts from the Vault

C. Executes password changes

D. Maintains Vault metadata

You are creating a new Rest API user that utilizes CyberArk Authentication. What is a correct process to provision this user?

A. Private Ark Client > Tools > Administrative Tools > Users and Groups > New > User

B. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Add

C. PVWA > User Provisioning > LDAP Integration > Add Mapping

D. PVWA > User Provisioning > Users and Groups > New > User

Which usage can be added as a service account platform?

A. Kerberos Tokens

B. IIS Application Pools

C. PowerShell Libraries

D. Loosely Connected Devices

PSM captures a record of each command that was executed in Unix.

A. TRIE

B. FALSE

Which option in the PrivateArk client is used to update users' Vault group memberships?

A. Update > General tab

B. Update > Authorizations tab

C. Update > Member Of tab

D. Update > Group tab