2024 New Training Course PAM-SEN Tutorial Preparation Guide
Dumps of PAM-SEN Cover all the requirements of the Real Exam
NEW QUESTION # 32
When SAML authentication is used to sign in to the PVWA, which service performs the actual authentication?
- A. CyberArk Password Vault Web Access (PVWA)
- B. Identity Provider (IdP) Most Voted
- C. Active Directory (AD)
- D. Service Provider (SP)
Answer: B
NEW QUESTION # 33
Which authentication methods does PSM for SSH support?
- A. LDAP, Windows Authentication, SSH keys
- B. RADIUS, Oracle SSO, CyberArk Password
- C. CyberArk password LDAP, RADIUS, SAML
- D. CyberArk Password, LDAP, RADIUS
Answer: D
NEW QUESTION # 34
HTML5 Gateway can be installed on which supported UNIX OS versions? (Choose two.)
- A. Android 11.x
- B. CentOS 7.x
- C. AK 7.x
- D. Ubuntu 20.x
- E. Red Hat Enterprise Linux 7.x
Answer: B,E
NEW QUESTION # 35
What utility is used to create or update a credential file?
- A. CAVaultManager.exe
- B. CreateCredFile.exe
- C. Password Vault Web Access
- D. Central Policy Manager
Answer: B
NEW QUESTION # 36
Which tools are used during a CPM renaming process? (Choose two.)
- A. PMTerminal.exe
- B. CreateCredFile Utility Most Voted
- C. CPMInDomain_Hardening.ps1
- D. Data Execution Prevention
- E. APIKeyManager Utility Most Voted
Answer: A,E
NEW QUESTION # 37
The RemoteApp feature of PSM allows seamless Application windows (i.e the Desktop of the PSM server will not be visible.)
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 38
A customer has five PVWA servers. Three are located at the primary data center and the remaining two are at a satellite data center.
What is important to consider about the load balancer? (Choose two.)
- A. It must not alter page content, or should include a mechanism to prevent pages from being altered. Most Voted
- B. It must support "sticky sessions". Most Voted
- C. It must be able to digitally sign and issue certificates for PVWA servers.
- D. It must be configured with high-availability (HA) enabled.
- E. It must be able to connect to all Vault and PVWA servers through Port TCP 443.
Answer: A,B
NEW QUESTION # 39
You are designing the number of PVWAs a customer must deploy. The customer has three data centers with a distributed Vault in each, requires high availability, and wants to use all Vaults at all times.
How many PVWAs does the customer need?
- A. two or less
- B. six or more
- C. three
- D. four
Answer: B
NEW QUESTION # 40
The security of the Vault Server is entirely dependent on the security of the network.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION # 41
A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication.
Which locations must you update?
- A. on both the Vault and the PVWA servers in C:\Windows\System32\drivers\etc\hosts
- B. on the Vault server in C:\Windows\System32\drivers\etc\hosts and in the PVWAApplication under Administration > LDAP Integration > Directories > Hosts
- C. on the Vault server in the certificate store and on the PVWA server in the certificate store
- D. in the Private Ark client under Tools > Administrative Tools > Directory Mapping
Answer: B
NEW QUESTION # 42
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply.
- A. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.
- B. Store the server key in a Hardware Security Module.
- C. Store the CS in a physical safe and mount the CD every time vault maintenance is performed.
- D. Copy the contents of the CD to the System Safe on the vault.
- E. Store the server key in the Provider cache.
Answer: A,B
NEW QUESTION # 43
All 80 employees from your satellite Tokyo office are complaining that browsing the PVWA site is very slow; however, your New York headquarters users are not experiencing this. The current PAM solution is:
2 distributed Vaults, the primary one in New York and a satellite in Tokyo
2 PVWA servers, both in New York with load balancing configured
2 PSM servers, both in New York without load balancing configured
1 CPM server in New York
All PVWA, PSM, and CPM servers are connected to the primary Vault
Which proposal optimally resolves the performance issue while minimizing the impact to production?
- A. Install two new PVWA servers in New York data center, configure load balancing and have them connect to the satellite Vault in Tokyo.
- B. Change the current distributed Vaults architecture, migrate back to a Primary-DR architecture, install two new PVWA servers in the Tokyo data center and configure load balancing. Connect to the local DR Vault and provide the URL of new PVWA servers to the local employees.
- C. Install two new PSM servers in the Tokyo data center, configure load balancing, connect to the local satellite vault, and inform the local employees to browse using the same PVWA URL.
- D. Install two new PVWA servers in Tokyo data center, configure load balancing, connect to the local satellite Vault and provide the URL of new PVWA servers to the local employees.
Answer: D
NEW QUESTION # 44
In addition to bit rate and estimated total duration of recordings per day, what is needed to determine the amount of storage required for PSM recordings?
- A. number of targets
- B. number of PSMs
- C. retention period
- D. number of users
Answer: C
NEW QUESTION # 45
In large-scale environments, it is important to enable the CPM to focus its search operations on specific Safes instead of scanning all Safes it sees in the Vault.
How is this accomplished?
- A. Administration Options > CPM Settings
- B. AllowedSafe Parameter on each platform policy
- C. Administration > Options > CPM Scanner
- D. MaxConcurrentConnection parameter on each platform policy
Answer: B
NEW QUESTION # 46
During the PSM installation process, Safes and a User are created.
In addition to Add Safes, Add/Update Users, Reset Users' Passwords, and Activate Users, which authorization(s) does the Vault user installing the PSM need to enable them to be successfully created?
- A. Manage Directory Mapping, Manage Vault File Categories
- B. Manage Vault File Categories Most Voted
- C. Manage Directory Mapping, Manage Server File Categories
- D. Manage Server File Categories
Answer: B
NEW QUESTION # 47
As Vault Admin, you have been asked to enable your organization's CyberArk users to authenticate using LDAP.
In addition to Audit Users, which permission do you need to complete this task?
- A. Add Network Areas
- B. Activate Users
- C. Manage Directory Mapping
- D. Add/Update Users
Answer: C
NEW QUESTION # 48
Which of the correct order of installation for PAS components?
- A. Vault, CPM, PVWA, PSM
- B. CPM, Vault, PSM, PVWA
- C. Vault, CPM, PSM, PVWA
- D. PVWA, Vault, CPM, PSM
Answer: A
NEW QUESTION # 49
What must you do to prepare a Windows server for PVWA installation?
- A. Enable IPv6.
- B. Verify the user performing the installation is Domain Administrator and has logon access to the Vault server.
- C. In the InstallationAutomation folder, run the PVWA_Prerequisites.ps1 file as an administrator in Powershell. Most Voted
- D. Install the PrivateArk client.
Answer: C
NEW QUESTION # 50
Which components support load balancing? (Choose two.)
- A. PVWA
- B. CPM
- C. EPV
- D. PTA
- E. PSM
Answer: A,E
NEW QUESTION # 51
What is the name of the account used to establish the initial RDP session from the end user client machine to the PSM server?
- A. PSMAdminConnect
- B. The credentials the end user retrieved from the vault.
- C. PSMConnect
- D. PSM
Answer: C
NEW QUESTION # 52
The PrivateArk clients allows a user to view the contents of the vault like a filesystem.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 53
Name two ways of viewing the ITAlog:
- A. Access the System Safe from the PrivateArk client.
- B. Log into the PVWA and go to the Reports tab.
- C. Go to the Thirdpary log directory on the CPM.
- D. Log into the vault locally and navigate to the Server folder under the PrivateArk install location.
Answer: A,D
NEW QUESTION # 54
There is a requirement for a password to change between 01:00 and 03:00 on Saturdays and Sundays; however, this does not work consistently.
Which platform setting may be the cause?
- A. The ImmediateInterval setting for the platform is incorrect and must be greater than or equal to 1.
- B. The DaysToRun setting for the platform is incorrect and must be set to Sat,Sun.
- C. The Interval setting for the platform is incorrect and must be less than 120.
- D. The HeadStartInterval setting for the platform is incorrect and must be set to 0.
Answer: C,D
NEW QUESTION # 55
......
Sample Questions of PAM-SEN Dumps With 100% Exam Passing Guarantee: https://www.troytecdumps.com/PAM-SEN-troytec-exam-dumps.html
Correct Practice Tests of PAM-SEN Dumps with Practice Exam: https://drive.google.com/open?id=1hAZE_Xq5QBKw_woJVkWKYIqjrr0fNRbP