CyberArk Certified Delivery Engineer (CDE) Training Practice Test

These questions are part of the practice quiz. Start practicing

• What is the intent of the ImmediateInterval parameter in a CPM configuration?
• Which of the following services is considered optional on the Vault?
• What does the Safe permission "View Safe Members" enable users to do?
• What is one purpose of the dbparm.ini file in CyberArk?
• What does the Safe permission "Manage Safe Members/Owners" allow users to do?
• Which statement accurately describes the function of a PrivateArk report?
• What type of logs provide component level entries such as service up or down?
• Does the PSM require the Remote Desktop Web Access role?
• Over which port does the EVD communicate?
• Which of the following is a key role of a vault administrator?
• What type of load balancing does CyberArk recommend?
• Which services are running on the passive node of a CyberArk High Availability Cluster?
• Which action can users perform with the Safe permission "Rename Accounts"?
• What role does the Vault administrator play during CPM installation?
• Is it possible to configure multiple dual authentication methods when accessing the Vault via PVWA?
• What does the Move Accounts/Folders permission facilitate?
• What type of logs come from different sources and may include trace files or separate files depending on the component?
• Which permissions are necessary for a vault administrator to update user accounts?
• What is a key feature of the Safe permission Access Safe Without Confirmation?
• Which of the following best describes the function of a CPM?
• What report would you reference to understand the properties of all safes?
• What port is associated with SMB for file sharing services?
• What controls the behavior of the CPM in relation to recently completed Dual Control requests?
• Which command allows configuration of a non-standard firewall port?
• What can users do with the Vault permission Audit Users?
• Can multiple Vault servers be load balanced?
• Which port does SSH use for secure shell access?
• How does the Vault administrator configure the FQDN of the DC during LDAP/S integration?
• Which protocol is primarily used for two-factor authentication in CyberArk?
• How many CPM and DR vaults should be created for effective management?
• Which port does KERBEROS use for authentication?
• Which services should be running on the DR vault of a CyberArk Disaster Recovery (DR) solution?
• What type of reports does PrivateArk offer?
• What does the Vault permission Backup All Safes allow users to do?
• What can users do with the permission Manage Server File Categories?
• What is a requirement for forwarding activity records to SIEM or SYSLOG servers?
• What does the Safe permission Authorize Account Request/Confirm Request allow users to do?
• Which permission allows users to manage locations in the vault hierarchy?
• Where are PrivateArk reports located?
• How many permissions can be applied on a safe to a user?
• What does the Vault permission Reset Users Passwords allow users to do?
• What port does LDAP utilize for directory services?
• What does the Safe permission "Delete Accounts" allow users to do?
• Which parameter controls how often the CPM looks for exclusive passwords that need to be changed?
• The Active/Non-Active users report helps in identifying which of the following?
• What is the function of the Vault permission Activate Users?
• What action can users perform with the Retrieve Accounts permission?
• What does the Safe permission Add Accounts allow users to do?
• What does the Safe permission Move Accounts/Folders allow users to do?
• Is it true that the Microsoft Windows Defender firewall can be edited after being taken over by the vault?
• What type of client is needed for users to access the PSM Gateway?
• For which component hardening does CyberArk create exceptions for DEP on selected executable files?
• Which CyberArk component is critical for protecting sensitive operations?
• Which parameter controls how often the CPM looks for one-time passwords that need to be changed?
• What does the permission "Validate Safe Content" require to retrieve an object?
• Does the vault use DNS for hostname resolution?
• What information is provided by the PrivateArk report Users List Report?
• What is the purpose of the Vault permission Restore All Safes?
• What is the function of the Safe permission List?
• What port is used by RDP for remote desktop connections?
• What is a common reason for configuring directory mappings in CyberArk?
• To which port does the SMB protocol relate?
• How does the system determine which user template to use if a transparent user matches two different directory mappings?
• Which report detail is important for compliance and auditing in CyberArk?
• Can multiple Privileged Session Management Proxies (PSMPs) be load balanced?
• What is the main purpose of load balancing in a privileged access management environment?
• What does the Update Account Properties permission primarily relate to?
• What should be considered when managing accounts in multiple VLANs?
• What does the Safe permission Access Safe Without Confirmation allow users to do?
• What limitation does the CPM have regarding password management on target devices?
• What is the purpose of the allowed Safes parameter in a CPM policy?
• Which measure is recommended for protecting accounts and encryption keys?
• Where does the Vault administrator configure the FQDN of the target email server during SMTP integration?
• What is the purpose of Directory Mapping in CyberArk?
• What permission would allow a user to track activities within the Vault?
• In a Disaster Recovery (DR) environment, which component should NEVER be configured for automatic failover due to the possibility of split-brain phenomenon?
• Which servers can receive forwarded records from CyberArk?
• Which authentication type is associated with LDAP within CyberArk?
• How is user password management facilitated in the Vault?
• What does the Export Data Vault (EVD) utility do?
• What is a benefit of managing multiple CPMs across different sites?
• Does the CyberArk Disaster Recovery module integrate with enterprise backup software?
• What is a key consideration when using wildcards in CPM policy?
• What is the purpose of the Safe permission "Specify Next Account Content"?
• Which permission lets users view account activity within the Safe?
• What port does SNMP use specifically for receiving traps?
• How does a Vault Administrator configure the CyberArk Disaster Recovery (DR) solution to perform automatic failover in case of a failure in the Primary Vault?
• What type of authenticators does CyberArk require for 2-factor authentication?
• Which characteristic is NOT associated with the PasswordManager_Pending safe?
• What does the Safe permission Use Accounts allow users to do?
• What can users do with the Safe permission Update Account Properties?
• What capability does the Safe permission Retrieve Accounts provide to users?
• Which port number is associated with LDAPS, the secure version of LDAP?
• What is a prerequisite for installing PSM?
• What capability does the Safe permission Initiate CPM Account Management Operations provide?
• What capability does the Safe permission "Validate Safe Content" provide?
• Does the Vault support dual-factor authentication?
• Which of the following is NOT one of the Eight Security Fundamentals for Privileged Account Security?
• What port does SAML use for security assertions?
• What key detail does the Safes List report provide?
• What does the PrivateArk report Active/Non-Active users report show?
• What is the purpose of the credentials provided during the installation of CPM?
• What is the purpose of the Vault permission Add Safes?
• What are the types of logs available in CyberArk?
• What is a primary reason for installing multiple active CPMs?
• What are the two types of reports that can be generated?
• What file is utilized for configuring new firewall rules on the vault?
• Which service, when failed, does not mandate a failover and is considered optional when working with a CyberArk High Availability Cluster?
• What is the role of the Vault permission Manage Directory Mapping?
• Who can use the permission Manage Directory Mapping?
• Which report would be useful for auditing user activity over a specific time period?
• Can multiple Password Vault Web Access (PVWAs) be load balanced?
• What port is typically used by Security Information and Event Management (SIEM) solutions?
• Which authentication method is NOT typically categorized as primary?
• What is the outcome of not installing multiple CPMs when needed?
• What is the primary authentication method for Windows in CyberArk?
• Which CyberArk utility can be used in conjunction with enterprise backup software?
• What is the purpose of the interval setting in a CPM policy?
• Can multiple Privileged Session Managers (PSMs) be load balanced?
• Which values are acceptable in the address field of an account?
• Which report would you use to see users who have not logged in recently?
• Which type of passwords does the parameter for 'Interval' specifically monitor?
• The Safes List report is essential for managing what aspect of CyberArk?
• How does the allowed Safes parameter enhance security in a CPM policy?
• What is one of the main functions of the Add Accounts permission?
• Is the installation of PSM dependent on Remote Desktop Services?
• Which .ini file supports PrivateArk Remote Control Agent?
• Which file is used to configure the IP Address of the SNMP Server?
• Can Italogs be forwarded to SIEM or SYSLOG servers?
• Which permission allows the use of the connect button in conjunction with certain other permissions?
• What strategy is recommended for creating a CyberArk Recovery Plan?
• Which port is used by NTP for network time synchronization?
• What does the Update Account Content permission allow in terms of file management?
• What capability does the Vault permission Add/Update Users provide?
• Why might an organization run the Users List Report?
• Can multiple Vault Servers be load balanced?
• Which file is essential for integrating the Vault with a RADIUS server?
• Which file is used to open up a non-standard firewall port to the vault?
• What does the Safe permission Create Folders allow users to do?
• What can users do with the permission "Manage Safe Members/Owners"?
• What does the Users List Report include about disabled users?
• What is the purpose of the Safe permission Delete Folders?
• What are some use cases for installing multiple CPMs?
• Which report type is specifically aimed at assessing user activity in the vault?
• The Safe permission "Unlock Accounts" becomes relevant under which policy?
• What does "dual authentication" typically refer to in CyberArk integration?
• What is an example of a proactive account onboarding process?
• What type of logs provide only error entries and only exist for some components?
• What could be a possible outcome of running the Active/Nonactive safes report?
• When working with CyberArk Cluster, how do the vault nodes exchange keep-alive messages?
• How can you ensure that vault firewall rules persist after changes?
• What does the Safe permission Delete Folders allow users to do?
• What does the PrivateArk report Active/Nonactive safes report indicate?
• To support a fault-tolerant and high-availability architecture, which file needs to be changed on the PVWA to enable communication with the Primary Vault and Satellite Vaults?
• What action can users take with the Safe permission "Backup Safe"?
• What permissions are required to create a directory mapping in CyberArk?
• What is a recommended method for monitoring service health checks in CyberArk?
• What outcome is provided by the Vault permission Add Safes?
• What does the immediate interval setting in a CPM policy primarily affect?
• What important components are needed for PTA and PSM integration?
• What type of accounts does the Account Feeds contain?
• What file is used to configure the ENE Service?
• When using multiple CPMs, which safe is shared by all CPMs?
• What port does Simple Mail Transfer Protocol (SMTP) use?
• In cybersecurity, what does the acronym PSM stand for?
• What is the proper way to allow the Vault to resolve hostnames?
• What is the primary action associated with the permission "Backup Safe"?
• Which statement is accurate regarding monitoring of target devices by CPM?
• What file is updated to perform an automatic failover in a CyberArk Disaster Recovery (DR) solution?
• Which permission allows users to delete an account?
• Can the PSM Gateway be installed on the same server as PSM for SSH?
• Where can the Export Data Vault (EVD) be run from?
• The PrivateArk report Safes List provides what type of information?
• What does the PrivateArk report license Capacity (LC) show?
• How many permissions can be assigned to a user in the Vault?
• What is the function of the Safe permission "Unlock Accounts"?
• What is required to launch connections to the PSM Gateway?
• What permissions does a vault administrator need to reset user passwords?
• Which capability is associated with the Safe permission "Manage Safe"?
• What happens after the Vault administrator configures syslog integration on the Vault?
• Can the Vault operate without a secure DNS configuration?
• Which of the following is a secondary authentication type used in CyberArk?
• Are exceptions for DEP created for all CyberArk components?
• Can the Vault be integrated with multiple SIEM or SYSLOG servers?
• What is included in the Export Data Vault (EVD) utility?
• What are Network Areas in the context of CyberArk?
• Who is the target audience of PrivateArk reports?
• Can multiple Central Policy Managers (CPMs) be load balanced?
• What integration allows the Vault Administrator to forward audit records from the Vault to SIEM?
• What type of logs provide detailed entries of workflows related to a component?
• What is a key benefit of REST API integration in account onboarding?
• In a Distributed Vaults environment, which component will not be communicating with the Satellite Vaults?
• What does the Vault permission Add Network Areas allow users to do?
• What types of records can be forwarded to SIEM or SYSLOG servers from the Vault?
• What does the Safe permission Update Account Content allow users to change?
• Which parameter controls how often the CPM looks for soon-to-be-expired passwords that need to be changed?
• What TCP port is commonly associated with secure communication in networks?