[Jul-2024] Check your preparation for CyberArk PAM-SEN On-Demand Exam [Q26-Q45]

ExamBoosts July 28, 2024 PAM-SEN > CyberArk 0

Rate this post

[Jul-2024] Check your preparation for CyberArk PAM-SEN On-Demand Exam

Practice Exam PAM-SEN Realistic Dumps Verified Questions

By obtaining the CyberArk Sentry – PAM certification, IT professionals can demonstrate their commitment to their profession, improve their job prospects, and increase their credibility and earning potential. CyberArk Sentry – PAM certification also provides professionals with the necessary skills and knowledge to secure privileged access and mitigate potential security threats to critical systems, applications, and data.

NO.26 What is a requirement for setting fault tolerance for PSMs?

Use a load balancer

Use a backup solution

CPM must be in all data centers

Install the Vault in an HA cluster

NO.27 After a PSM session is complete, the PSM server uploads the recording to the Vault for long-term storage.

TRUE

FALSE

NO.28 For redundancy, you want to add a secondary RADIUS server.
What must you do to accomplish this?

Add to the application settings of the PVWA web.config file.

In the PVWA vault.ini file, list each RADIUS server host address in the “Addresses” attribute separated by commas.

Open the DBParm.ini on the Vault server. Add the second RADIUS server configuration settings after the first one, separated by a comma. Most Voted

In the PVWA web.config file, add the location element at the end of the config file. Set the path value to
“Default Web Site/PasswordVault/api/auth/pkipn/logon”.

NO.29 Which file would you modify to configure the vault to send SNMP traps to your monitoring solution?

dbparm ini

paragent.ini

ENEConf.ini I

padr ini

NO.30 When integrating a Vault with HSM, which file is uploaded to the HSM device?

server.key

recpub.key

recprv.key

mdbase.dat

NO.31 What is the purpose of the password Reconcile process?

To test that CyberArk is storing accurate credentials for accounts.

To change the password of an account according to organizationally defined password rules.

To allow CyberArk to manage unknown or lost credentials.

To generate a new complex password.

NO.32 You are configuring the Vault to send syslog audit data to your organization’s SIEM solution.
What is a valid value for the SyslogServerProtocol parameter in DBPARM.INI file?

TLS

SSH

SMTP

SNMP

NO.33 As Vault Admin, you have been asked to enable your organization’s CyberArk users to authenticate using LDAP.
In addition to Audit Users, which permission do you need to complete this task?

Add Network Areas

Manage Directory Mapping

Add/Update Users

Activate Users

NO.34 In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es).

TRUE

FALSE

NO.35 The PrivateArk clients allows a user to view the contents of the vault like a filesystem.

TRUE

FALSE

NO.36 In addition to disabling Windows services or features not needed for PVWA operations, which tasks does PVWA_Hardening.ps1 perform when run? (Choose two.)

performs IIS hardening

configures all group policy settings

renames the local Administrator Account

configures Windows Firewall

imports the CyberArk INF configuration

NO.37 The connect button requires PSM to work.

TRUE

FALSE

NO.38 Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?

dbparm.ini

PARagent.ini

ENEConf.ini

padr.ini

NO.39 Which service must be set to Automatic (delayed start) after the Vault is installed and configured?

Windows Time service

PrivateArk Database

Windows Update service

PrivateArk Server

NO.40 This value needs to be added to the PVWA configuration file:
Assuming all CyberArk PVWA servers were installed using default paths/folders, which configuration file should you locate and edit to accomplish this?

c:inetpubwwwrootpasswordvaultweb.config

c:inetpubwwwrootpasswordvaultservicesweb.config

c:cyberarkpassword vault web accessenvweb.config

c:program filescyberarkpassword vault web accessweb.config

NO.41 Which pre-requisite step must be completed before installing a Vault?

Join the server to a domain.

Install a clean operating system.

Install antivirus software.

Copy the master CD to a folder on the Vault server.

NO.42 A customer asked you to help scope the company’s PSM deployment.
What should be included in the scoping conversation?

Recordings file path

Recordings codec