CyberArk PAM-SEN Exam Practice Test Instant Access

Question 1

When SAML authentication is used to sign in to the PVWA, which service performs the actual authentication?

AActive Directory (AD)

BIdentity Provider (IdP) Most Voted

CService Provider (SP)

DCyberArk Password Vault Web Access (PVWA)

Answer : B

Question 2

A customer has three data centers distributed globally and wants highly-available PSM connections in each segmented zone. In addition, the customer needs a highly-available PSM connection for the CyberArk Admins.

What will best satisfy this customer's needs?

Aone PSM per zone with a load balancer and two PSMs for Admins with a load balancer

Bsix PSMs in the mam data center with a load balancer and one PSM for Admins

Ctwo PSMs per zone with a load balancer and two PSMs for Admins with a dedicated load balancer

Dthree PSMs per zone with CyberArk built-in load balancing

Answer : C

Question 3

You need to add a new PSM server to an existing CyberArk environment.

What is the best way to determine the sizing of this server?

AReview the ''Recommended Server Specifications'' for PSMs in the CyberArk Documents website. Most Voted

BUse the specifications of any existing PSM and request a server of the same size.

CUse the CyberArk Support Knowledgebase, search for ''PSM Sizing'' and locate the Knowledgebase article related to sizing.

DRefer to the Microsoft Windows website, determine the minimum specifications required for the Operating System you are installing, and then add 4 Gb of RAM and 20 GB of disk.

Answer : C

Question 4

In which file must the attribute 'SignAuthnRequest=''true''' be added to the PartnerIdentityProvider element to support signed SAML requests?

Asaml.config

Bsamlconfig.ini

CPVWAConfig.xml

DPVConfiguration.xml

Answer : C

Question 5

Which parameter must be identical for both the Identity Provider (IdP) and the PVWA?

AIdP ''EntityID'' and ''PartnerIdentityProvider Name'' in PVWA saml.config file

BIdP ''User name'' and ''SingleSignOnServiceUrl'' in PVWA saml.config file

CIdP ''Audience'' and ''ServiceProviderName'' in the PVWA saml.config file

DIdP ''Secure hash algorithm'' and ''Certificate'' in the PVWA saml.config file

Answer : C

Question 6

When performing ''In Domain'' hardening of a PSM server, which steps must be performed? (Choose two.)

AImport CyberArk policy settings from the provided file into a new GPO. Most Voted

BApply advanced audit on the PSM server.

CLink GPO to a dedicated OU containing CyberArk PSM servers. Most Voted

DImport an INF file to the local machine.

EConfigure AppLocker rules to block running unknown executables.

Answer : A, C

Question 7

Which step is required to register a Vault manually in Amazon Web Services using CAVaultManager?

ASpecify Amazon as the cloud vendor using the /CloudVendor Flag

BAfter running the postinstall utility, restart the 'PrivateArk Server' service

CSpecify the Cloud region using the /CloudRegion flag

DSpecify whether the Vault is distributed or stand alone

Answer : C

CyberArk Sentry - PAM PAM-SEN Exam Practice Test