[UPDATED Aug-2024] Best Value Available Preparation Guide for PAM-SEN Exam
1 Full PAM-SEN Practice Test and 138 Unique Questions, Get it Now!
NEW QUESTION # 23
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply
- A. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.
- B. Copy the contents of the CD to the System Safe on the vault
- C. Store the server key in a Hardware Security Module.
- D. Store the CD in a physical safe and mount the CD every time vault maintenance is performed.
- E. Store the server key in the Provider cache
Answer: A,C
NEW QUESTION # 24
In order to avoid conflicts with the hardening process, third party applications like Antivirus and Backup Agents should be installed on the Vault server before installing the Vault.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION # 25
You are installing the HTML5 gateway on a Linux host using the RPM provided.
After installing the Tomcat webapp, what is the next step in the installation process?
- A. Deploy the HTML5 service (guacd). Most Voted
- B. Secure the connection between the guacd and the webapp.
- C. Configure ASLR.
- D. Secure the webapp and JWT validation endpoint.
Answer: B
NEW QUESTION # 26
Which component must be installed before the first CPM installation?
- A. EPM
- B. PSM
- C. PVWA
- D. PTA
Answer: D
NEW QUESTION # 27
Your customer wants to store the Safes Data on Vault Drive D instead of Drive C.
Which file should you edit?
- A. user.ini
- B. DBparm.ini
- C. Vault.ini
- D. TSparm.ini Most Voted
Answer: D
NEW QUESTION # 28
After installing the first PSM server and before installing additional PSM servers, you must ensure the user performing the installation is not a direct owner of which safe?
- A. PSMUnmanagedApplicationAccounts Safe
- B. PSMSessionBackupAccounts Safe
- C. PSMRecordingsSessionAccounts Safe
- D. PSMUnmanagedSessionAccounts Safe
Answer: D
NEW QUESTION # 29
A customer has three data centers distributed globally and wants highly-available PSM connections in each segmented zone. In addition, the customer needs a highly-available PSM connection for the CyberArk Admins.
What will best satisfy this customer's needs?
- A. two PSMs per zone with a load balancer and two PSMs for Admins with a dedicated load balancer
- B. six PSMs in the mam data center with a load balancer and one PSM for Admins
- C. three PSMs per zone with CyberArk built-in load balancing
- D. one PSM per zone with a load balancer and two PSMs for Admins with a load balancer
Answer: A
NEW QUESTION # 30
When creating a distributed Vault environment architecture, what is the maximum number of Vault servers that can be deployed?
- A. 3 - all primary
- B. 5 - number of primary and satellite Vaults can be specified during installation
- C. 6 - 1 primary and 5 satellite
- D. 10 - 2 primary and 8 satellite
Answer: C
NEW QUESTION # 31
What would be a good use case for a High Availability vault?
- A. Recovery Time Objectives or Recovery Point Objectives are at or near zero.
- B. PSM is used.
- C. Integration with an Enterprise Backup Solution is required.
- D. Off site replication is required.
Answer: A
NEW QUESTION # 32
To apply a new license file you must:
- A. Upload the license.xml file to the System Safe
- B. Upload the license.xml file to the Vaultlnternal Safe.
- C. Upload the license.xml file to the Vaultlnternal Safe and restart the PrivateArk Server service.
- D. Upload the license.xml file to the System Safe and restart the PrivateArk Server service.
Answer: A
NEW QUESTION # 33
Which method can be used to directly authenticate users to PSM for SSH? (Choose three.)
- A. OpenID Connect (OIDC) authentication
- B. Windows authentication
- C. SAML authentication
- D. CyberArk authentication Most Voted
- E. RADIUS authentication Most Voted
- F. LDAP authentication Most Voted
Answer: D,E,F
NEW QUESTION # 34
How should you configure PSM for SSH to support load balancing?
- A. by editing sshd.config on the all the PSM for SSH servers
- B. in PVWA > Options > PSM for SSH Proxy > Servers > VIP
- C. by using a network load balancer Most Voted
- D. in PVWA > Options > PSM for SSH Proxy > Servers
Answer: B
NEW QUESTION # 35
Name two ways of viewing the ITAlog:
- A. Access the System Safe from the PrivateArk client.
- B. Log into the vault locally and navigate to the Server folder under the PrivateArk install location.
- C. Go to the Thirdpary log directory on the CPM.
- D. Log into the PVWA and go to the Reports tab.
Answer: A,B
NEW QUESTION # 36
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply.
- A. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.
- B. Store the server key in the Provider cache.
- C. Copy the contents of the CD to the System Safe on the vault.
- D. Store the CS in a physical safe and mount the CD every time vault maintenance is performed.
- E. Store the server key in a Hardware Security Module.
Answer: A,E
NEW QUESTION # 37
A vault admin received an email notification that a password verification process has failed.
Which service sent the message?
- A. The CyberArk Even Notification Engine Service on the Vault.
- B. The CyberArk Privileged Session Manager service on the Vault.
- C. The PrivateArk Server Service on the Vault.
- D. The CyberArk Password Manager service on the Components Server.
Answer: A
NEW QUESTION # 38
A customer wants to store PSM recordings for 100 days and estimates they will have 10 Windows sessions per day for 100 minutes each.
What is the minimum storage required for the Vault and PAReplicate for the PSM recordings?
- A. 500 GB
- B. 5 GB
- C. 250 GB
- D. 25 GB Most Voted
Answer: C
NEW QUESTION # 39
What is a requirement for setting fault tolerance for PSMs?
- A. Use a backup solution
- B. Use a load balancer
- C. Install the Vault in an HA cluster
- D. CPM must be in all data centers
Answer: D
NEW QUESTION # 40
In which configuration file do you add LoadBalancerClientAddressHeader when you enable x-forwarding on the PVWA loadbalancer?
- A. CyberArkScheduledTasks.exe.config
- B. web.config
- C. PVconfiguration.xml
- D. apigw.ini
Answer: B
NEW QUESTION # 41
In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es).
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION # 42
A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication.
Which locations must you update?
- A. on both the Vault and the PVWA servers in C:\Windows\System32\drivers\etc\hosts
- B. on the Vault server in the certificate store and on the PVWA server in the certificate store
- C. on the Vault server in C:\Windows\System32\drivers\etc\hosts and in the PVWAApplication under Administration > LDAP Integration > Directories > Hosts
- D. in the Private Ark client under Tools > Administrative Tools > Directory Mapping
Answer: C
NEW QUESTION # 43
......
Get Instant Access to PAM-SEN Practice Exam Questions: https://www.troytecdumps.com/PAM-SEN-troytec-exam-dumps.html
The Best PAM-SEN Exam Study Material Premium Files and Preparation Tool: https://drive.google.com/open?id=1-dq0qKXO8B5pGT5n3XshGBwvasUDpMY6