PAM-CDE-RECERT 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
Which file is used to configure the ENE service?

A.EN
B.ini
C.ENEConfig.ini
D.dbparm.ini
E.PARagent.ini

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/EventNotification-Engine.htm

Question No : 2
Which of the following features are provided by Ad-Hoc Access (formerly Secure Connect)? (Choose three.)

A.PSM connections to target devices that are not managed by CyberArk
B.session recording
C.real-time live session monitoring
D.PSM connections from a terminal without the need to login to the Password Vault Web Access (PVWA)

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Connecting-with-Secure-Connect.htm

Question No : 3
Which is the purpose of a linked account?

A.To ensure that a particular collection of accounts all have the same password.
B.To ensure a particular set of accounts all change at the same time.
C.To connect the CPM to a target system.
D.To allow the use of additional passwords within a password management process.

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/LinkedAccounts.htm#:~:text=The%20linked%20accounts%20feature%20enables,to%20change%20the%20original%20password.&text=When%20the%20linked%20accounts%20are,of%20the%20Account%20Details%20page

Question No : 4
Any user can monitor live sessions in real time when initiating RDP connection via Secure Connect through PSM.

A.True
B.False

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring-the-Privileged-Session-Management-Interface.htm

Question No : 5
To support a fault tolerant and high-availability architecture, the Password Vault Web Access (PVWA) servers must to be configured to communicate with the Primary Vault and Satellite Vaults.
Which file needs to be changed on the PVWA to enable this setup?

A.Vault.ini
B.dbparm.ini
C.pvwa.ini
D.Satellite.ini

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Password-Vault-Web-Access-Installation.htm

Question No : 6
For a Safe with object level access control enabled the Vault administrator is able to turn off object level access control when it no longer needed on the Safe.

A.True
B.False

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ObjectLevel-Access-Control.htm

Question No : 7
What is the purpose of the password verify process?

A.To test that CyberArk is storing accurate credentials for accounts.
B.To change the password of an account according to organizationally defined password rules.
C.To allow CyberArk to manage unknown or lost credentials.
D.To generate a new complex password.

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/VerifyingPasswords.htm#:~:text=The%20CPM%20can%20verify%20password,manually%20by%20an%20authorized%20user

Question No : 8
During the process of installing the Central Policy Manager (CPM), the Vault administrator will be asked to provide the credentials for an administrative user in the Vault.
For which purpose are these credentials used?

A.The credentials will be used later by the CPM to retrieve passwords from the Vault.
B.The credentials are used by the installer to register the CPM in the CyberArk database.
C.The credentials are used by the installer to authenticate to the Vault and create the Central Policy Manager (CPM) environment (Safes, users. etc.).
D.The credentials will be used later by the CPM to update passwords in the Vault.

正解:

Question No : 9
Access control to passwords is implemented by __________.

A.Vault authorizations
B.Safe authorizations
C.Master Policy
D.platform settings

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ObjectLevel-Access-Control.htm

Question No : 10
The PSM requires the Remote Desktop Web Access role service.

A.True
B.False

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Before-Installing-PSM.htm

Question No : 11
When managing SSH keys, the Central Policy Manager (CPM) stores the private key __________.

A.in the Vault
B.on the target server
C.in the Vault and on the target server
D.nowhere because the private key can always be generated from the public key

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing %20SSH%20Keys.htm

Question No : 12
In a Distributed Vaults environment, which of the following components will NOT be communicating with the Satellite Vaults?

A.AAM Credential Provider (previously known as AIM Credential Provider)
B.ExportVaultData utility
C.PAReplicate utility
D.Central Policy Manager

正解:

Question No : 13
What are the functions of the Remote Control Agent service? (Choose three.)

A.Allows remote monitoring the Vault
B.Sends SNMP traps from the Vault
C.Maintains audit data
D.Allows CyberArk services to be managed (start/stop/status) remotely

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Privileged-Account-Security-Remote-Administration.htm#:~:text=The%20CyberArk%20Vault%20Remote%20Control,and%20the%20Disaster%20Recovery%20Server

Question No : 14
When using multiple Central Policy Managers (CPM), which one of the following Safes is shared by all CPMs?

A.PasswordManager
B.PasswordManager_Pending
C.PasswordManager_workspace
D.PasswordManager_ADIntemal

正解:
Explanation:
Reference: https://www.niap-ccevs.org/MMO/Product/st_vid11006-agd4.pdf (558)

Question No : 15
Which file is used to open up a non-standard firewall port to the Vault?

A.dbparm.ini
B.PARagent.ini
C.passparm.ini
D.Vault.ini

正解:

CyberArk PAM-CDE-RECERT 問題練習