Question 1

You plan to install the Privilege Cloud Connector on Windows Server 2019 and must leverage your existingRDS Per-user licenses for PSM connections. What must you do?

Options :

A : Add the UseRDSPerUser=Yes line to the basic_psm.ini parameters file.

B : Install the RDS License Server Service on Windows 2016.

C : Migrate the local PSMConnect users to Domain users.

D : Modify the UseRDSPerUser parameter to Yes on every Windows-related platform.

Answer: C

Question 2

Which ports do the CyberArk Identity Connector require to be opened to support using Active Directory forLDAP authentication to Privileged Cloud Shared Services? (Choose two.)

Options :

A : TCP 636 from the connector host to the domain controller

B : TCP 443 from the connector host to the CyberArk Tenant

C : TCP 636 from the CyberArk Tenant to the domain controller

D : TCP 443 from the CyberArk Tenant to the connector host

E : TCP 636 from the domain controller to the CyberArk Tenant

Answer: A,B

Question 3

Which option correctly describes the authentication differences between CyberArk Privilege Cloud andCyberArk PAM Self-Hosted?

Options :

A : CyberArk Privilege Cloud only provides a username and password authentication without third-partyIdP integration; CyberArk PAM Self-Hosted uses traditional on-premises methods such as Windowsand LDAP. but lacks modern protocols such as SAML or OIDC.

B : CyberArk Privilege Cloud uses cloud-based methods, integrating with CyberArk Identity for MFA. andsupports SAML and OIDC; CyberArk PAM Self-Hosted depends on on-premises methods such asRADIUS and LDAP, but can adopt SAML or OIDC with additional setups.

C : CyberArk Privilege Cloud requires on-premises components for all authentication and does not supportother cloud-based authentication protocols; CyberArk PAM Self-Hosted offers a wide array ofmethods, including support for SAML. OIDC. and other modern protocols, without needing onpremises components.

D : Both use the same authentication methods.

Answer: B

Question 4

In which platform configuration section under Automatic Password Management is the AllowedSafesplatform parameter found?

Options :

A : Privileged Account Management

B : Additional Policy Settings

C : General

D : CPM plugin

Answer: C

Question 5

During CPM hardening, which locally created users are granted Logon as a Service rights in the local grouppolicy? (Choose 2.)

Options :

A : PasswordManager

B : PluginManagerUser

C : ScannerUser

D : PasswordManagerUser

E : CPMServiceAccount

Answer: C,D

Confidently Practice Online with Free CPC-CDE-RECERT Exam Cram

Buying Options: