CyberArk PAM-SEN Exam Practice Test Instant Access

Question 1

Which components support load balancing? (Choose two.)

ACPM

BPVWA

CPSM

DPTA

EEPV

Answer : B, C

Question 2

You have been asked to limit a platform called ''Windows_Servers'' to safes called ''WindowsDC1'' and ''WindowsDC2''. The platform must not be assigned to any other safe.

What is the correct way to accomplish this?

AEdit the ''Windows_Servers'' platform, expand ''Automatic Password Management'', then select General and modify ''AllowedSafes'' to be (WindowsDC1)|(WindowsDC2).

BEdit the ''Windows_Servers'' platform, expand ''Automatic Password Management'', then select Options and modify ''AllowedSafes'' to be (Win*).

CEdit the ''WindowsDC1'' and ''WindowsDC2'' safes through Safe Management, Add ''Windows_Servers'' to the ''AllowedPlatforms''.

DLog in to PrivateArk using an Administrative user, Select File, Server File Categories, Locate the category ''WindowsServersAllowedSafes'' and specify ''WindowsDC1,WindowsDC2''.

Answer : A

Question 3

By default, the vault secure protocol uses which IP port and protocol.

ATCP/1858

BTCP/443

CUDP/1858

DTCP/80

Answer : A

Question 4

What would be a good use case for the Replicate module?

ARecovery Time Objectives or Recovery Point Objectives are at or near zero

BIntegration with an Enterprise Backup Solution is required.

COff site replication is required.

DPSM is used

Answer : C

Question 5

You want to add an additional maintenance user on the PSM for SSH.

How can you accomplish this if InstallCyberarkSSHD is set to Integrated?

ACreate a local user and add it to the PSMMaintenance Group.

BCreate a local user called proxymng.

CCreate a local user and add it to group configured for the parameter AllowGroups in the /etc/sshd_config file

DCreate a local user, called psmpmng.

Answer : C

Question 6

The PrivateArk clients allows a user to view the contents of the vault like a filesystem.

ATRUE

BFALSE

Answer : A

Question 7

Which statement is correct about CPM behavior in a distributed Vault environment?

ACPMs should only access the primary Vault. When it is unavailable, CPM cannot access any Vault until another Vault is promoted as the new primary Vault.

BCPMs should access only the satellite Vaults.

CCPMs should only access the primary Vault. When it is unavailable, CPM cannot access any Vault until the original primary Vault is operational again.

DCPM should access all Vaults - primary and the satellite.

Answer : A

CyberArk PAM-SEN CyberArk Sentry - PAM Exam Practice Test