CyberArk PAM-SEN Exam Questions Instant Access

Question 1

To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

AAdd the FQDN & IP details for each LDAP host into the local hosts file of the Vault server. Most Voted

BConfigure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization's DNS servers.

CEnsure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.

DSet the ReferralsDNSLookup parameter value to ''No'' in the directory configuration.

Answer : A

Question 2

You are setting up a Linux host to act as an HTML 5 gateway for PSM sessions.

Which servers need to be trusted by the Linux host to secure communications through the gateway?

APSM and PVWA

BPSM and CPM

CPVWA and Vault

DVault and PSM

Answer : A

Question 3

You are successfully managing passwords in the alpha cyberark com domain; however, when you attempt to manage a password in the beta cyberark com domain, you receive the 'network path not found' error. What should you check first?

AThat the username and password are correct

BThat the CPM can successfully resolve addresses in the beta cyberark com domain

CThat the end user has the correct permissions on the safe.

DThat an appropriate trust relationship exists between alpha.cyberark com and beta cyberark.com

Answer : B

Question 4

A customer has five main data centers with one PVWA in each center under different URLs.

How can you make this setup fault tolerant?

AThis setup is already fault tolerant.

BInstall more PVWAs in each data center.

CContinuously monitor PVWA status and send users the link to another PVWA if issues are encountered.

DLoad balance all PVWAs under same URL.

Answer : D

Question 5

During the PSM installation process, Safes and a User are created.

In addition to Add Safes, Add/Update Users, Reset Users' Passwords, and Activate Users, which authorization(s) does the Vault user installing the PSM need to enable them to be successfully created?

AManage Vault File Categories Most Voted

BManage Server File Categories

CManage Directory Mapping, Manage Server File Categories

DManage Directory Mapping, Manage Vault File Categories

Answer : A

Question 6

What is a prerequisite step before installing the Vault on Windows 2019?

AConfigure the Kerberos authentication method on the default IIS Application pool

BCheck that the server IP address is correctly configured and that it is static

CIn the Network Connection properties, configure Preferred DNS Servers

DInstall Microsoft Windows patch KB4014998

Answer : B

Question 7

All 80 employees from your satellite Tokyo office are complaining that browsing the PVWA site is very slow; however, your New York headquarters users are not experiencing this. The current PAM solution is:

2 distributed Vaults, the primary one in New York and a satellite in Tokyo

2 PVWA servers, both in New York with load balancing configured

2 PSM servers, both in New York without load balancing configured

1 CPM server in New York

All PVWA, PSM, and CPM servers are connected to the primary Vault

Which proposal optimally resolves the performance issue while minimizing the impact to production?

AInstall two new PVWA servers in Tokyo data center, configure load balancing, connect to the local satellite Vault and provide the URL of new PVWA servers to the local employees.

BInstall two new PVWA servers in New York data center, configure load balancing and have them connect to the satellite Vault in Tokyo.

CInstall two new PSM servers in the Tokyo data center, configure load balancing, connect to the local satellite vault, and inform the local employees to browse using the same PVWA URL.

DChange the current distributed Vaults architecture, migrate back to a Primary-DR architecture, install two new PVWA servers in the Tokyo data center and configure load balancing. Connect to the local DR Vault and provide the URL of new PVWA servers to the local employees.

Answer : A

CyberArk Sentry - PAM PAM-SEN Exam Questions