CyberArk PAM-SEN Exam Practice Test Instant Access

Question 1

You have been asked to limit a platform called ''Windows_Servers'' to safes called ''WindowsDC1'' and ''WindowsDC2''. The platform must not be assigned to any other safe.

What is the correct way to accomplish this?

AEdit the ''Windows_Servers'' platform, expand ''Automatic Password Management'', then select General and modify ''AllowedSafes'' to be (WindowsDC1)|(WindowsDC2).

BEdit the ''Windows_Servers'' platform, expand ''Automatic Password Management'', then select Options and modify ''AllowedSafes'' to be (Win*).

CEdit the ''WindowsDC1'' and ''WindowsDC2'' safes through Safe Management, Add ''Windows_Servers'' to the ''AllowedPlatforms''.

DLog in to PrivateArk using an Administrative user, Select File, Server File Categories, Locate the category ''WindowsServersAllowedSafes'' and specify ''WindowsDC1,WindowsDC2''.

Answer : A

Question 2

A customer has three data centers distributed globally and wants highly-available PSM connections in each segmented zone. In addition, the customer needs a highly-available PSM connection for the CyberArk Admins.

What will best satisfy this customer's needs?

Aone PSM per zone with a load balancer and two PSMs for Admins with a load balancer

Bsix PSMs in the mam data center with a load balancer and one PSM for Admins

Ctwo PSMs per zone with a load balancer and two PSMs for Admins with a dedicated load balancer

Dthree PSMs per zone with CyberArk built-in load balancing

Answer : C

Question 3

To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

AAdd the FQDN & IP details for each LDAP host into the local hosts file of the Vault server. Most Voted

BConfigure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization's DNS servers.

CEnsure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.

DSet the ReferralsDNSLookup parameter value to ''No'' in the directory configuration.

Answer : A

Question 4

CyberArk User Neil is trying to connect to the Target Linux server 192.168.1.164 using a domain account ACME/linuxuser01 on domain acme.corp using PSM for SSH server 192.168.65.145.

What is the correct syntax?

Assh neil@linuxuser01:acme.corp@192.168.1.164@192.168.65.145

Bssh neil@linuxuser01#acme.corp@192.168.1.164@192.168.65.145 Most Voted

Cssh neil@linuxuser01@192.168.1.164@192.168.65.145

Dssh neil@linuxuser01@acme.corp@192.168.1.164@192.168.65.145

Answer : B

Question 5

The PrivateArk clients allows a user to view the contents of the vault like a filesystem.

ATRUE

BFALSE

Answer : A

Question 6

A customer has five PVWA servers. Three are located at the primary data center and the remaining two are at a satellite data center.

What is important to consider about the load balancer? (Choose two.)

AIt must not alter page content, or should include a mechanism to prevent pages from being altered. Most Voted

BIt must support ''sticky sessions''. Most Voted

CIt must be able to digitally sign and issue certificates for PVWA servers.

DIt must be able to connect to all Vault and PVWA servers through Port TCP 443.

EIt must be configured with high-availability (HA) enabled.

Answer : A, B

Question 7

What is the purpose of the PSM health check hardening?

ARemove IIS settings which can be considered security vulnerabilities.

BValidate that the PSM is ready to be placed behind a load balancer.

CConfirm that the Windows Services for PSM are running on the server.

DEnsure that the AppLocker script does not have any syntax errors.

Answer : A

CyberArk Sentry - PAM PAM-SEN Exam Practice Test