PAM-SEN by CyberArk Valid Free Exam Practice Test

Question 1

A first PSM server has been installed.
What should you confirm before installing any additional PSM servers?

A. The path of the Recordings Folder must be different on all PSM installations. B. The user performing the installation is a direct owner in the PSMUnmanagedSessionAccounts Safe, PSM safe and member of PVWAMonitor group. C. The PSM ID of the first installed PSM server was changed and the additional PSM server can use the same PSM ID. D. The user performing the installation is not a direct owner in the PSMUnmanagedSessionAccounts Safe.
Most Voted

Correct Answer: D

Question 2

Which command should be executed to harden a Vault after registering it to Azure?

A. HardenAzureFW.ps1 Most Voted B. HardenVaultFW.ps1 C. ExecuteStage ./Hardening/HardeningConf.xml D. ExecuteStage ./PostInstallation/PostInstallation.xml

Correct Answer: B

Question 3

Before the hardening process, your customer identified a PSM Universal Connector executable that will be required to run on the PSM.
Which file should you update to allow this to run?

A. PSMConfigureAppLocker.xml B. PSMAppConfig.xml C. PSMConfigureHardening.xml D. PSMHardening.xml

Correct Answer: A

Question 4

Which utility should be used to register the Vault in Amazon Web Services?

A. StorageManager B. CAVaultManager Most Voted C. CloudVaultManager D. CACert

Correct Answer: B

Question 5

In large-scale environments, it is important to enable the CPM to focus its search operations on specific Safes instead of scanning all Safes it sees in the Vault.
How is this accomplished?

A. Administration Options > CPM Settings B. MaxConcurrentConnection parameter on each platform policy C. AllowedSafe Parameter on each platform policy D. Administration > Options > CPM Scanner

Correct Answer: C

Question 6

Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

A. Safe Key B. Recovery Public Key C. Recovery Private Key D. Server Key

Correct Answer: D

Question 7

What would be a good use case for the Disaster Recovery module?

A. PSM is used. B. Off site replication is required. C. Integration with an Enterprise Backup Solution is required. D. Recovery Time Objectives or Recovery Point Objectives are at or near zero.

Correct Answer: B

Question 8

Which component should be installed on the Vault if Distributed Vaults are used with PSM?

A. Disaster Recovery B. Remote Control Client C. RabbitMQ D. Distributed Vault Server

Correct Answer: C

Question 9

Which method can be used to directly authenticate users to PSM for SSH? (Choose three.)

A. CyberArk authentication Most Voted B. RADIUS authentication Most Voted C. Windows authentication D. SAML authentication E. OpenID Connect (OIDC) authentication F. LDAP authentication Most Voted

Correct Answer: A,B,F

Question 10

Which statements are correct about the PSM HTML5 gateway? (Choose two.)

A. It does not support connections to target system where NLA is enabled on the PSM server B. It does not support session recording capabilities for applications that run outside a web browser C. SSH sessions cannot be established D. Printer redirection cannot be enabled E. Smart card redirection is supported

Correct Answer: A,D

CyberArk Sentry - PAM - PAM-SEN Exam Practice Test