[2024] Pass CyberArk PAM-SEN Test Practice Test Questions Exam Dumps [Q20-Q43]

4/5 - (1 vote)

[2024] Pass CyberArk PAM-SEN Test Practice Test Questions Exam Dumps

Verified PAM-SEN dumps Q&As – PAM-SEN dumps with Correct Answers

NEW QUESTION 20
Which of the following are supported authentication methods for CyberArk? Check all that apply.

CyberArk Password (SRP)

LDAP

SAML

PKI

RADIUS

OracleSSO

Biometric

NEW QUESTION 21
For redundancy, you want to add a secondary RADIUS server.
What must you do to accomplish this?

Add to the application settings of the PVWA web.config file.

In the PVWA vault.ini file, list each RADIUS server host address in the “Addresses” attribute separated by commas.

Open the DBParm.ini on the Vault server. Add the second RADIUS server configuration settings after the first one, separated by a comma. Most Voted

In the PVWA web.config file, add the location element at the end of the config file. Set the path value to
“Default Web Site/PasswordVault/api/auth/pkipn/logon”.

NEW QUESTION 22
Which method can be used to directly authenticate users to PSM for SSH? (Choose three.)

CyberArk authentication Most Voted

LDAP authentication Most Voted

RADIUS authentication Most Voted

Windows authentication

SAML authentication

OpenID Connect (OIDC) authentication

NEW QUESTION 23
Which statement is correct about CPM behavior in a distributed Vault environment?

CPMs should only access the primary Vault. When it is unavailable, CPM cannot access any Vault until another Vault is promoted as the new primary Vault.

CPMs should access only the satellite Vaults.

CPMs should only access the primary Vault. When it is unavailable, CPM cannot access any Vault until the original primary Vault is operational again.

CPM should access all Vaults – primary and the satellite.

NEW QUESTION 24
Which authentication methods does PSM for SSH support?

CyberArk password LDAP, RADIUS, SAML

LDAP, Windows Authentication, SSH keys

RADIUS, Oracle SSO, CyberArk Password

CyberArk Password, LDAP, RADIUS

NEW QUESTION 25
Which pre-requisite step must be completed before installing a Vault?

Join the server to a domain.

Install a clean operating system.

Install antivirus software.

Copy the master CD to a folder on the Vault server.

NEW QUESTION 26
Which file would you modify to configure the vault to send SNMP traps to your monitoring solution?

dbparm.ini

paragent.ini

ENEConf.ini

padr.ini

NEW QUESTION 27
What is the best practice for storing the Master CD?

Copy the files to the Vault server and discard the CD.

Copy the contents of the CD to a Hardware Security Module and discard the CD.

Store the CD in a secure location, such as a physical safe.

Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permission) on the vault.

NEW QUESTION 28
What would be a good use case for the Replicate module?

Recovery Time Objectives or Recovery Point Objectives are at or near zero.

Integration with an Enterprise Backup Solution is required.

Off site replication is required.

PSM is used.

NEW QUESTION 29
What is a prerequisite step before CyberArk can be configured to support RADIUS authentication?

Log on to the PrivateArk Client, display the User properties of the user to configure, run the Authentication method drop-down list, and select RADIUS authentication.

In the RADIUS server, define the CyberArk Vault as a RADIUS client/agent. Most Voted

In the Vault installation folder, run CAVaultManager as administrator with the SecureSecretFiles command.

Navigate to /Server/Conf and open DBParm.ini and set the RadiusServersInfo parameter.

NEW QUESTION 30
What must you do to prepare a Windows server for PVWA installation?

In the InstallationAutomation folder, run the PVWA_Prerequisites.ps1 file as an administrator in Powershell. Most Voted

Install the PrivateArk client.

Verify the user performing the installation is Domain Administrator and has logon access to the Vault server.

Enable IPv6.

NEW QUESTION 31
The primary purpose of the CPM is Password Management.

TRUE

FALSE

NEW QUESTION 32
What is the best practice for storing the Master CD?

Copy the files to the Vault server and discard the CD.

Copy the contents of the CD to a Hardware Security Module and discard the CD.

Store the CD in a secure location, such as a physical safe.

Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions} on the vault.

NEW QUESTION 33
You are installing the HTML5 gateway on a Linux host using the RPM provided.
After installing the Tomcat webapp, what is the next step in the installation process?

Deploy the HTML5 service (guacd). Most Voted

Secure the connection between the guacd and the webapp.

Secure the webapp and JWT validation endpoint.

Configure ASLR.

NEW QUESTION 34
When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.

True, this is the default behavior.

False, this is not possible.

True, if the ‘AllowFailback’ setting is set to yes in the PADR.ini file.

True, if the ‘AllowFailback’ setting is set to yes in the dbparm.ini file.

NEW QUESTION 35
Which SMTP address can be set on the Notification Settings page to re-invoke the ENE setup wizard after the initial Vault installation?

255.255.255.255

8.8.8.8

192.168.1.1

1.1.1.1

NEW QUESTION 36
After installing the Vault, you need to allow Firewall Access for Windows Time service to sync with NTP servers 10.1.1.1 and 10.2.2.2.
What should you do?

Edit DBParm.ini to add: AllowNonStandardFWAddresses=[10.1.1.1,10.2.2.2],Yes,123:outbound/udp.
Most Voted

Edit DBParm.ini to add: NTPServer=[10.1.1.1:123/UDP,10.2.2.2:123/UDP].

Edit DBParm.ini to add:
AllowNonStandardFWAddresses=[10.1.1.1,10.2.2.2],Yes,123:outbound/udp,123:inbound/udp.

Edit the Windows Firewall configuration to add a rule for Port 123/udp outbound to 10.1.1.1 and
10.2.2.2.

NEW QUESTION 37
A vault admin received an email notification that a password verification process has failed.
Which service sent the message?

The PrivateArk Server Service on the Vault.

The CyberArk Password Manager service on the Components Server.

The CyberArk Even Notification Engine Service on the Vault.

The CyberArk Privileged Session Manager service on the Vault.

NEW QUESTION 38
The Remote Desktop Services role must be property licensed by Microsoft.

TRUE

FALSE

NEW QUESTION 39
All 80 employees from your satellite Tokyo office are complaining that browsing the PVWA site is very slow; however, your New York headquarters users are not experiencing this. The current PAM solution is:
2 distributed Vaults, the primary one in New York and a satellite in Tokyo
2 PVWA servers, both in New York with load balancing configured
2 PSM servers, both in New York without load balancing configured
1 CPM server in New York
All PVWA, PSM, and CPM servers are connected to the primary Vault
Which proposal optimally resolves the performance issue while minimizing the impact to production?

Install two new PVWA servers in Tokyo data center, configure load balancing, connect to the local satellite Vault and provide the URL of new PVWA servers to the local employees.

Install two new PVWA servers in New York data center, configure load balancing and have them connect to the satellite Vault in Tokyo.

Install two new PSM servers in the Tokyo data center, configure load balancing, connect to the local satellite vault, and inform the local employees to browse using the same PVWA URL.

Change the current distributed Vaults architecture, migrate back to a Primary-DR architecture, install two new PVWA servers in the Tokyo data center and configure load balancing. Connect to the local DR Vault and provide the URL of new PVWA servers to the local employees.

NEW QUESTION 40
This value needs to be added to the PVWA configuration file:
Assuming all CyberArk PVWA servers were installed using default paths/folders, which configuration file should you locate and edit to accomplish this?

c:inetpubwwwrootpasswordvaultweb.config

c:inetpubwwwrootpasswordvaultservicesweb.config

c:cyberarkpassword vault web accessenvweb.config

c:program filescyberarkpassword vault web accessweb.config

NEW QUESTION 41
Which components support load balancing? (Choose two.)

CPM

PVWA

PSM

PTA

EPV

NEW QUESTION 42
Which utility should be used to register the Vault in Amazon Web Services?

CAVaultManager Most Voted