2026 CPC-CDE-RECERT exam torrent CPC-CDE-RECERT Study Guide [Q39-Q57]

NEW QUESTION 39
How can a platform be configured to work with load-balanced PSMs?

Remove all entries from configured PSM Servers except for the ID of the PSMs with load balancing.

Create a new PSM definition that targets the load balancer IP address and assign to the platform.

Include details of the PSMs with load balancing in the Basic_psm.ini file on each PSM server.

Use the Privilege Cloud Portal to update the Session Management settings for the platform in the Master Policy.

NEW QUESTION 40
You have been tasked with deploying a Privilege Cloud PSM for SSH connector When the initial installation has successfully completed, you create and permission several maintenance users to be used for administering the connector.
Which configuration file must be updated to define these maintenance users?

sshd.config

basic_psmpserver.conf

sshd_config

psmpparms

NEW QUESTION 41
Which Safe(s) does the AllowedSafes=Win platform parameter configuration match? (Choose two.)

SQL-Win-SA

WiNdOwS_Accts

WindowsPasswords

win-ssh-keys

CXD-WIN-ADMINS

NEW QUESTION 42
You are configuring firewall rules between the Privilege Cloud components and the Privilege Cloud. Which firewall rules should be set up to allow connections?

from the CyberArk Privilege Cloud to the Privilege Cloud components

from the Privilege Cloud components to the CyberArk Privilege Cloud
C bi-directionally between the Privilege Cloud components and the CyberArk Privilege cloud

from the Privilege Cloud components to CyberArk.com

NEW QUESTION 43
Arrange the steps to failover to the passive CPM in the correct sequence.

NEW QUESTION 44
You want to enforce Multi-Factor Authentication (MFA) for all Privilege Cloud Shared Services users and require them to set up an MFA factor. How should you accomplish this?

Only allow SAML as the authentication method, enforce MFA on the SAML Identity Provider (IdP), and ensure users set up MFA accordingly on the IdP.

Navigate to the Identity Administration Portal’s Policies section and configure the required authentication policies for CyberArk Identity.

Navigate to the Identity Administration Portal’s Policies section and set the user security policy for Privilege Cloud to an authentication profile that only allows Multiple Authentication Mechanisms.

Navigate to the Identity Administration Portal’s Policies section and configure the authentication policies for CyberArk Identity, adding a new authentication rule that applies with an “identity cookie” as a filter.

NEW QUESTION 45
What must be specified when authenticating to Privilege Cloud during the Secure Tunnel install?

Vault IP Address

Subdomain or Customer ID

Privilege Cloud URL

CaseID

NEW QUESTION 46
Which external-facing IP addresses need to be provided to CyberArk when configuring Privilege Cloud so that they can be allowlisted?

Cloud Connectors and Secrets Manager (if installed)

All users that will be accessing Privilege Cloud

On-premises backup servers

All users who are Administrators in Privilege Cloud

NEW QUESTION 47
Which method can be used to directly authenticate users to PSM for SSH? (Choose three.)

CyberArk authentication

LDAP authentication

RADIUS authentication

Windows authentication

SAML authentication

OpenID Connect (OIDC) authentication

NEW QUESTION 48
Which statement is correct about using the AllowedSafes platform parameter?

It allows users to access accounts in specific safes.

It prevents the CPM from scanning all safes, restricting it to scan only safes that match the AllowedSafes configuration.

It allows the CPM to access PSM safes to monitor platform configuration and connection component changes.

It prevents the CPM from processing pending items in the Discovery safes enforcing manual intervention to complete the onboarding process.

NEW QUESTION 49
On the CPM, you want to verify if DEP is disabled for the required executables According to best practices, which executables should be listed? (Choose 2.)

Telnet.exe

Plink.exe

putty.exe

mstsc.exe

NEW QUESTION 50
You want to improve performance on the CPM by restricting accounts for the CYBRWINDAD platform to only the WINDEMEA and WINDEMEA_ADMIN Safes. How do you set this in CyberArk?

In the CYBRWINDAD platform, under Automatic Password Management > General, configure AllowedSafes and set it to (WINDEMEA)|(WINDEMEA_ADMIN).

In the settings for Configuration/CPM assigned to the WINDEMEA and WINDEMEAADMIN Safes, configure AllowedSafes and set it to (WINDEMEA)|(WINDEMEAADMIN).

In the CYBRWINDAD platform, under UI & Workflows > Properties > Optional, configure AllowedSafes and set it to (WINDEMEA)|(WINDEMEA_ADMIN).

Modify cpm.ini on the relevant CPM(s) and add AllowedSafesCYBRWINDAD and set it to (WINDEMEA)|(WINDEMEAADMIN).

NEW QUESTION 51
What are the basic network requirements to deploy a CPM server?

Port 1858 to the Privilege Cloud Vault service backend and Port 443 to the Privilege Cloud Portal

Port 1858 only

any ports to the Privilege Cloud Vault service backend

Port UDP/1858 to the Privilege Cloud Vault service backend and all required ports to the targets and Port 3389 to the PSM

NEW QUESTION 52
When creating a new Safe, if you select “Save account versions for a period of days” within Version Retention settings, what is the default number of days that password versions are saved?

7

14

30

90

NEW QUESTION 53
You are designing a CyberArk Privilege Cloud environment for a new customer with three data center locations: one in London, one in New York, and one in Singapore. The customer wants to reduce the amount of traffic on their dedicated network links between each data center. Which design should you consider to manage their credentials?

Deploy CPM connectors in each data center and configure region specific Safes.

Deploy a CPM connector in London and increase the number of days between password changes.

Deploy three CPM connectors in New York, and configure region specific Safes to send traffic equally to each connector CPM.

Deploy CPM connectors in a single data center because the password management traffic is routed through the Privilege Cloud service.

NEW QUESTION 54
Which Safe(s) does the AllowedSafes=Win platform parameter configuration match? (Choose two.)

WindowsPasswords

win-ssh-keys

CXD-WIN-ADMINS

SQL-Win-SA

WiNdOwS_Accts

NEW QUESTION 55
Refer to the exhibit.
You set up your LDAP Directory in CyberArk Identity, but encountered an error during the connection test.
Which scenarios could represent a valid misconfiguration? (Choose 2.)

TCP Port 636 could be blocked by a network firewall, preventing communication between the CyberArk Identity Connector and the LDAP Server.

All required CA Certificates have been installed on the CyberArk Identity Connector but the LDAP Bind credentials provided are incorrect.

Verify Server Certificate’ is activated but the provided hostname is not listed as a Subject Alternative Name (SAN) in the LDAP server’s certificate.

TCP Port 636 could be blocked by a network firewall, preventing communication between the Secure Tunnel and the LDAP Server.

NEW QUESTION 56
On Privilege Cloud, what can you use to update users’ Permissions on Safes? (Choose 2.)

Privilege Cloud Portal

PrivateArk Client

REST API

PACLI

PTA

NEW QUESTION 57
You are configuring an integration to provision users based on LDAP directory services for Privilege Cloud Shared Services. Which component must first be installed and configured in the environment to support this?

CyberArk Identity Connector

Secure Tunnel

Privilege Cloud Connector

Linux Connector Server