Latest PAM-SEN Pass Guaranteed Exam Dumps with Accurate & Updated Questions
PAM-SEN Exam Brain Dumps - Study Notes and Theory
NEW QUESTION # 33
Which authentication methods does PSM for SSH support?
- A. CyberArk password LDAP, RADIUS, SAML
- B. LDAP, Windows Authentication, SSH keys
- C. CyberArk Password, LDAP, RADIUS
- D. RADIUS, Oracle SSO, CyberArk Password
Answer: C
NEW QUESTION # 34
What is the PRIMARY reason for installing more than 1 active CPM?
- A. Multiple instances increase response time.
- B. Multiple instances create fault tolerance.
- C. Having additional CPMs increases the maximum number of devices CyberArk can manage.
- D. Installing CPMs in multiple sites prevents complex firewall rules to manage devices at remote sites.
Answer: C
NEW QUESTION # 35
Which CyberArk component changes passwords on Target Devices?
- A. PVWA
- B. OPM
- C. PrivateArk
- D. CPM
- E. AIM
- F. Vault
- G. PSM
Answer: A,D,G
NEW QUESTION # 36
What must you do to prepare a Windows server for PVWA installation?
- A. In the InstallationAutomation folder, run the PVWA_Prerequisites.ps1 file as an administrator in Powershell. Most Voted
- B. Verify the user performing the installation is Domain Administrator and has logon access to the Vault server.
- C. Enable IPv6.
- D. Install the PrivateArk client.
Answer: A
NEW QUESTION # 37
You want to improve performance on the CPM by restricting accounts for the CYBRWINDAD platform to only the WINDEMEA and WINDEMEA_Admin safes.
How do you set this in CyberArk?
- A. In the CYBRWINDAD platform, under Automatic Password Management/General, configure AllowedSafes and set to (WINDEMEA)|(WINDEMEA_ADMIN). Most Voted
- B. In the settings for Configuration/CPM assigned to the WINDEMEA and WINDEMEAADMIN safes, configure AllowedSafes and set to (WINDEMEA)|(WINDEMEAADMIN).
- C. In the CYBRWINDAD platform, under UI&Workflows/Properties/Optional, configure AllowedSafes and set to (WINDEMEA)|(WINDEMEA_ADMIN).
- D. Modify cpm.ini on the relevant CPM/s and add the setting AllowedSafesCYBRWINDAD and set to (WINDEMEA)|(WINDEMEAADMIN).
Answer: A
NEW QUESTION # 38
This value needs to be added to the PVWA configuration file:
Assuming all CyberArk PVWA servers were installed using default paths/folders, which configuration file should you locate and edit to accomplish this?
- A. c:\inetpub\wwwroot\passwordvault\services\web.config
- B. c:\program files\cyberark\password vault web access\web.config
- C. c:\inetpub\wwwroot\passwordvault\web.config
- D. c:\cyberark\password vault web access\env\web.config
Answer: C
NEW QUESTION # 39
-
The installCyberArkSSHD parameter on the PSM for SSH can be set to multiple values.
Match each value to the correct condition.
Answer:
Explanation:
NEW QUESTION # 40
How should you configure PSM for SSH to support load balancing?
- A. by editing sshd.config on the all the PSM for SSH servers
- B. in PVWA > Options > PSM for SSH Proxy > Servers
- C. in PVWA > Options > PSM for SSH Proxy > Servers > VIP
- D. by using a network load balancer Most Voted
Answer: C
NEW QUESTION # 41
As a member of a PAM Level-2 support team, you are troubleshooting an issue related to load balancing four PVWA servers at two data centers. You received a note from your Level-1 support team stating "When testing PVWA website from a workstation, we noticed that the "Source IP of last sign-in" was shown as the VIP (Virtual IP address) assigned to the four PVWA servers instead of the workstation IP where the PVWA site was launched from." Which step should you take?
- A. Verify the "LoadBalancerClientAddressHeader" parameter setting in PVWA configuration file Web.config is set to "X-Forwarded-For".
- B. Add a firewall rule to allow the testing workstation to connect to the VIP (Virtual IP address) assigned to the four PVWA servers on Port TCP 443.
- C. Add the VIP (Virtual IP address) assigned to the four PVWA servers to the certificates issued for all four PVWA servers, if missing.
- D. Edit the dbparm.ini file on the Vault server and add the IP or subnet of the workstation to the whitelist.
Answer: A
NEW QUESTION # 42
In which configuration file do you add LoadBalancerClientAddressHeader when you enable x-forwarding on the PVWA loadbalancer?
- A. apigw.ini
- B. PVconfiguration.xml
- C. web.config
- D. CyberArkScheduledTasks.exe.config
Answer: C
NEW QUESTION # 43
A customer has three data centers distributed globally and wants highly-available PSM connections in each segmented zone. In addition, the customer needs a highly-available PSM connection for the CyberArk Admins.
What will best satisfy this customer's needs?
- A. two PSMs per zone with a load balancer and two PSMs for Admins with a dedicated load balancer
- B. three PSMs per zone with CyberArk built-in load balancing
- C. one PSM per zone with a load balancer and two PSMs for Admins with a load balancer
- D. six PSMs in the mam data center with a load balancer and one PSM for Admins
Answer: A
NEW QUESTION # 44
When integrating a Vault with HSM, which file is uploaded to the HSM device?
- A. mdbase.dat
- B. server.key
- C. recpub.key
- D. recprv.key
Answer: B
NEW QUESTION # 45
A vault admin received an email notification that a password verification process has failed.
Which service sent the message?
- A. The CyberArk Privileged Session Manager service on the Vault.
- B. The CyberArk Password Manager service on the Components Server.
- C. The PrivateArk Server Service on the Vault.
- D. The CyberArk Even Notification Engine Service on the Vault.
Answer: D
NEW QUESTION # 46
The RemoteApp feature of PSM allows seamless Application windows (i.e the Desktop of the PSM server will not be visible.)
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 47
Which user is enabled when replicating data between active and stand-by Vaults?
- A. Operator
- B. Auditor
- C. Backup
- D. DR
Answer: D
NEW QUESTION # 48
......
Pass CyberArk PAM-SEN Test Practice Test Questions Exam Dumps: https://www.realexamfree.com/PAM-SEN-real-exam-dumps.html
The Best CyberArk Sentry Study Guide for the PAM-SEN Exam: https://drive.google.com/open?id=1yufIGMJOgqMQZOAqY0dFaql45_l9wv7K
