CyberArk PAM-CDE-RECERT CyberArk CDE Recertification Online Training
CyberArk PAM-CDE-RECERT Online Training
The questions for PAM-CDE-RECERT were last updated at Feb 19,2025.
- Exam Code: PAM-CDE-RECERT
- Exam Name: CyberArk CDE Recertification
- Certification Provider: CyberArk
- Latest update: Feb 19,2025
Which of the following PTA detections are included in the Core PAS offering?
- A . Suspected Credential Theft
- B . Over-Pass-The Hash
- C . Golden Ticket
- D . Unmanaged Privileged Access
A Logon Account can be specified in the Master Policy.
- A . TRUE
- B . FALSE
In addition to disabling Windows services or features not needed for PVWA operations, which tasks does PVWA Hardening.ps1 perform when run?
- A . Performs IIS hardening: Imports the CyberArk INF configuration
- B . Performs IIS hardening: Configures all group policy settings
- C . Performs IIS hardening: Renames the local Administrator Account
- D . Configures Windows Firewall: Removes all installation files.
For Digital Vault Cluster in a high availability configuration, how does the cluster determine if a node is down?
- A . The heartbeat s no longer detected on the private network.
- B . The shared storage array is offline.
- C . An alert is generated in the Windows Event log.
- D . The Digital Vault Cluster does not detect a node failure.
A
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the-CyberArk-Digital-Cluster-Vault-Server.htm?TocPath=Administration%7CComponents%7CDigital%20Vault%7COperate%20the%20CyberArk%20Vault%7CCyberArk%20High-Availability%20Vault%20Cluster%7C_____1
Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile Utility? (Choose three.)
- A . Operating System Username
- B . Host IP Address
- C . Client Hostname
- D . Operating System Type (Linux/Windows/HP-UX)
- E . Vault IP Address
- F . Time Frame
A,B,C
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/CreateCredFile-Utility.htm
A new HTML5 Gateway has been deployed in your organization.
Where do you configure the PSM to use the HTML5 Gateway?
- A . Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway
- B . Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers
- C . Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway
- D . Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details
Which Automatic Remediation is configurable for a PTA detection of a “Suspected Credential Theft”?
- A . Add to Pending
- B . Rotate Credentials
- C . Reconcile Credentials
- D . Disable Account
Which SMTP address can be set on the Notification Settings page to re-invoke the ENE setup wizard after the initial Vault installation.
- A . 255.255.255.255
- B . 8.8.8.8
- C . 192.168.1.1
- D . 1.1.1.1
DRAG DROP
For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

The password upload utility must run from the CPM server
- A . TRUE
- B . FALSE