最新的CyberArk CPC-CDE-RECERT免費考試真題

問題1

You are configuring an integration to provision users based on LDAP directory services for Privilege Cloud Shared Services. Which component must first be installed and configured in the environment to support this?

A. Secure Tunnel

B. Privilege Cloud Connector

C. CyberArk Identity Connector

D. Linux Connector Server

正確答案: C

說明：（僅 Fast2test 成員可見）

問題2

A CyberArk Privileged Cloud Shared Services customer asks you how to find recent failed login events for all users. Where can you do this without generating reports?

A. Identity Administration Portal
C both Identity Administration and Identity User Portals

B. Identity User Portal

C. Privileged Cloud Portal

正確答案: A

問題3

Which statement is correct about using the AllowedSafes platform parameter?

A. It allows the CPM to access PSM safes to monitor platform configuration and connection component changes.

B. It allows users to access accounts in specific safes.

C. It prevents the CPM from processing pending items in the Discovery safes enforcing manual intervention to complete the onboarding process.

D. It prevents the CPM from scanning all safes, restricting it to scan only safes that match the AllowedSafes configuration.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題4

Which file must you edit to ensure the PSM for SSH server is not hardened automatically after installation?

A. vault.ini

B. psmgw.config

C. psmpparms

D. user.cred

正確答案: C

說明：（僅 Fast2test 成員可見）

問題5

After correctly configuring reconciliation parameters in the Prod-AIX-Root-Accounts Platform, this error message appears in the CPM log: CACPM410E Ending password policy Prod-AIX-Root-Accounts since the reconciliation task is active but the AllowedSafes parameter was not updated What caused this situation?

A. The CPM is currently configured to use to an unsigned engine.

B. The reconciliation account defined in the Platform is in a locked state and is not accessible.

C. The AllowedSafes parameter does not include the safe containing the reconciliation account defined in the Platform.

D. A second CPM is incorrectly configured to manage the reconciliation account's safe which is causing a deadlock situation between the two CPMs.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題6

You want to enforce Multi-Factor Authentication (MFA) for all Privilege Cloud Shared Services users and require them to set up an MFA factor. How should you accomplish this?

A. Navigate to the Identity Administration Portal's Policies section and configure the authentication policies for CyberArk Identity, adding a new authentication rule that applies with an "identity cookie" as a filter.

B. Navigate to the Identity Administration Portal's Policies section and configure the required authentication policies for CyberArk Identity.

C. Navigate to the Identity Administration Portal's Policies section and set the user security policy for Privilege Cloud to an authentication profile that only allows Multiple Authentication Mechanisms.

D. Only allow SAML as the authentication method, enforce MFA on the SAML Identity Provider (IdP), and ensure users set up MFA accordingly on the IdP.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題7

Which statements are correct regarding LDAP integration in Privilege Cloud Shared Services? (Choose two.)

A. The CA certificate that issued the LDAP server's Server Authentication certificate must be provided to CyberArk Support.

B. The Privilege Cloud PAM leverages the directory services integration of CyberArk Identity.

C. A Secure Tunnel installation is required to access the on-premises LDAP directory.

D. The CA certificate that issued the LDAP server's Server Authentication certificate must be trusted on the machine running the CyberArk Identity Connector.

E. LDAP integration can be configured in the Privilege Cloud web interface under Administration > Configuration Options > LDAP Integration.

正確答案: B,D

說明：（僅 Fast2test 成員可見）

最新的CyberArk CDE-CPC Recertification - CPC-CDE-RECERT免費考試真題

聯系我們

站內鏈接

最新更新