PAM-SEN Free Exam Questions & Answers PDF Updated on Mar-2024 [Q26-Q49]

PAM-SEN Free Exam Questions and Answers PDF Updated on Mar-2024

Latest PAM-SEN Exam Dumps Recently Updated 138 Questions

CyberArk PAM-SEN certification exam covers a range of topics, including CyberArk's PAM solution architecture, installation and configuration, user management, access control, auditing and reporting, and troubleshooting. Candidates must demonstrate their proficiency in these areas through a combination of multiple-choice questions and hands-on, performance-based scenarios. Successful completion of the exam indicates that the candidate has the necessary skills and expertise to effectively use CyberArk's PAM solutions to secure privileged access within their organization.

NEW QUESTION # 26
Which of the correct order of installation for PAS components?

A. CPM, Vault, PSM, PVWA
B. Vault, CPM, PSM, PVWA
C. Vault, CPM, PVWA, PSM
D. PVWA, Vault, CPM, PSM

Answer: C

NEW QUESTION # 27
Which component should be installed on the Vault if Distributed Vaults are used with PSM?

A. Disaster Recovery
B. Distributed Vault Server
C. Remote Control Client
D. RabbitMQ

Answer: D

NEW QUESTION # 28
Which of the following are supported authentication methods for CyberArk? Check all that apply.

A. OracleSSO
B. PKI
C. Biometric
D. LDAP
E. RADIUS
F. SAML
G. CyberArk Password (SRP)

Answer: B,D,E

NEW QUESTION # 29
This value needs to be added to the PVWA configuration file:
Assuming all CyberArk PVWA servers were installed using default paths/folders, which configuration file should you locate and edit to accomplish this?

A. c:\inetpub\wwwroot\passwordvault\web.config
B. c:\inetpub\wwwroot\passwordvault\services\web.config
C. c:\cyberark\password vault web access\env\web.config
D. c:\program files\cyberark\password vault web access\web.config

Answer: A

NEW QUESTION # 30
Which file must you edit to ensure the PSM for SSH server is not hardened automatically after installation?

A. vault.ini
B. psmpparms
C. user.cred
D. psmgw.config

Answer: B

NEW QUESTION # 31
For redundancy, you want to add a secondary RADIUS server.
What must you do to accomplish this?

A. Open the DBParm.ini on the Vault server. Add the second RADIUS server configuration settings after the first one, separated by a comma. Most Voted
B. Add to the application settings of the PVWA web.config file.
C. In the PVWA vault.ini file, list each RADIUS server host address in the "Addresses" attribute separated by commas.
D. In the PVWA web.config file, add the location element at the end of the config file. Set the path value to
"Default Web Site/PasswordVault/api/auth/pkipn/logon".

Answer: A

NEW QUESTION # 32
In which configuration file do you add LoadBalancerClientAddressHeader when you enable x-forwarding on the PVWA loadbalancer?

A. web.config
B. CyberArkScheduledTasks.exe.config
C. apigw.ini
D. PVconfiguration.xml

Answer: A

NEW QUESTION # 33
By default, the vault secure protocol uses which IP port and protocol.

A. TCP/1858
B. TCP/443
C. TCP/80
D. UDP/1858

Answer: A

NEW QUESTION # 34
Which statement about REST API is correct? (Choose two.)

A. REST API Windows authentication method allows skipping the logon API by using the Windows default credentials with a Kerberos ticket.
B. REST calls are directly sent to the currently active Vault using Port 1858.
C. Each REST API call requires that a valid authentication token be provided. Most Voted
D. When a user successfully authenticates to the Vault, an authentication token is returned. Most Voted
E. To allow High Availability, REST API can be configured to support Session Load Balancing by editing the PVConfiguration.xml and setting the AllowPVWASessionRedandancy=Yes.

Answer: C,D

NEW QUESTION # 35
What is required before the first CPM can be installed?

A. The environment must have at least one Vault and one PVWA installed.
B. The PSM component must be installed and proper functionality validated.
C. The Vault environment must have at least one account stored in a safe.
D. Custom platforms must be downloaded from the CyberArk Marketplace.

Answer: A

NEW QUESTION # 36
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply.

A. Store the CS in a physical safe and mount the CD every time vault maintenance is performed.
B. Store the server key in a Hardware Security Module.
C. Store the server key in the Provider cache.
D. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.
E. Copy the contents of the CD to the System Safe on the vault.

Answer: B,D

NEW QUESTION # 37
You are configuring SNMP remote monitoring for your organization's Vault servers.
In the PARAgent.ini, which parameter specifies the destination of the Vault SNMP traps?

A. SNMPTrapPort
B. SNMPVersion
C. SNMPCommunity
D. SNMPHostIP Most Voted

Answer: D

NEW QUESTION # 38
As Vault Admin, you have been asked to enable your organization's CyberArk users to authenticate using LDAP.
In addition to Audit Users, which permission do you need to complete this task?

A. Add Network Areas
B. Manage Directory Mapping
C. Activate Users
D. Add/Update Users

Answer: B

NEW QUESTION # 39
A first PSM server has been installed.
What should you confirm before installing any additional PSM servers?

A. The user performing the installation is not a direct owner in the PSMUnmanagedSessionAccounts Safe.
Most Voted
B. The path of the Recordings Folder must be different on all PSM installations.
C. The PSM ID of the first installed PSM server was changed and the additional PSM server can use the same PSM ID.
D. The user performing the installation is a direct owner in the PSMUnmanagedSessionAccounts Safe, PSM safe and member of PVWAMonitor group.

Answer: A

NEW QUESTION # 40
Which statements are correct about the PSM HTML5 gateway? (Choose two.)

A. SSH sessions cannot be established
B. Smart card redirection is supported
C. Printer redirection cannot be enabled
D. It does not support connections to target system where NLA is enabled on the PSM server
E. It does not support session recording capabilities for applications that run outside a web browser

Answer: C,D

NEW QUESTION # 41
What is the PRIMARY reason for installing more than 1 active CPM?

A. Multiple instances increase response time.
B. Installing CPMs in multiple sites prevents complex firewall rules to manage devices at remote sites.
C. Multiple instances create fault tolerance.
D. Having additional CPMs increases the maximum number of devices CyberArk can manage.

Answer: D

NEW QUESTION # 42
When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.

A. False, this is not possible
B. True if the 'AllowFailback' setting is set to yes in the dbparm mi file
C. True, if the 'AllowFailback' setting is set to yes in the PADR.ini file.
D. True, this is the default behavior

Answer: C

NEW QUESTION # 43
The Remote Desktop Services role must be properly licensed by Microsoft.

A. TRUE
B. FALSE

Answer: A

NEW QUESTION # 44
What is a step to enable NTP synchronization on a stand-alone Vault?

A. Run Powershell and add the NTP module.
B. Restart the Vault Event Notification Engine service.
C. Restart the organization's NTP servers.
D. Edit dbparm.ini and add a Firewall rule for the NTP address.

Answer: D

NEW QUESTION # 45
Which user is enabled when replicating data between active and stand-by Vaults?

A. DR
B. Operator
C. Auditor
D. Backup

Answer: A

NEW QUESTION # 46
What is the best practice for storing the Master CD?

A. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions} on the vault.
B. Copy the contents of the CD to a Hardware Security Module and discard the CD.
C. Copy the files to the Vault server and discard the CD.
D. Store the CD in a secure location, such as a physical safe.

Answer: A

NEW QUESTION # 47
Which configuration file and Vault utility are used to migrate the server key to an HSM?

A. DBparm.ini and CAVaultManager.exe
B. VaultKeys.ini and ChangeServerKeys.exe
C. VaultKeys.ini and CAVaultManager.exe
D. DBparm.ini and ChangeServerKeys.exe

Answer: B

NEW QUESTION # 48
-
The installCyberArkSSHD parameter on the PSM for SSH can be set to multiple values.
Match each value to the correct condition.