CyberArk PAM-SEN Exam Practice Test Instant Access

Question 1

A customer asked you to help scope the company's PSM deployment.

What should be included in the scoping conversation?

ARecordings file path

BRecordings codec

CRecordings retention period

DRecordings file type

Answer : C

Question 2

A customer has three data centers distributed globally and wants highly-available PSM connections in each segmented zone. In addition, the customer needs a highly-available PSM connection for the CyberArk Admins.

What will best satisfy this customer's needs?

Aone PSM per zone with a load balancer and two PSMs for Admins with a load balancer

Bsix PSMs in the mam data center with a load balancer and one PSM for Admins

Ctwo PSMs per zone with a load balancer and two PSMs for Admins with a dedicated load balancer

Dthree PSMs per zone with CyberArk built-in load balancing

Answer : C

Question 3

Which statement about REST API is correct? (Choose two.)

AWhen a user successfully authenticates to the Vault, an authentication token is returned. Most Voted

BREST API Windows authentication method allows skipping the logon API by using the Windows default credentials with a Kerberos ticket.

CTo allow High Availability, REST API can be configured to support Session Load Balancing by editing the PVConfiguration.xml and setting the AllowPVWASessionRedandancy=Yes.

DEach REST API call requires that a valid authentication token be provided. Most Voted

EREST calls are directly sent to the currently active Vault using Port 1858.

Answer : A, D

Question 4

When creating a distributed Vault environment architecture, what is the maximum number of Vault servers that can be deployed?

A5 - number of primary and satellite Vaults can be specified during installation

B3 - all primary

C6 - 1 primary and 5 satellite

D10 - 2 primary and 8 satellite

Answer : C

Question 5

All 80 employees from your satellite Tokyo office are complaining that browsing the PVWA site is very slow; however, your New York headquarters users are not experiencing this. The current PAM solution is:

2 distributed Vaults, the primary one in New York and a satellite in Tokyo

2 PVWA servers, both in New York with load balancing configured

2 PSM servers, both in New York without load balancing configured

1 CPM server in New York

All PVWA, PSM, and CPM servers are connected to the primary Vault

Which proposal optimally resolves the performance issue while minimizing the impact to production?

AInstall two new PVWA servers in Tokyo data center, configure load balancing, connect to the local satellite Vault and provide the URL of new PVWA servers to the local employees.

BInstall two new PVWA servers in New York data center, configure load balancing and have them connect to the satellite Vault in Tokyo.

CInstall two new PSM servers in the Tokyo data center, configure load balancing, connect to the local satellite vault, and inform the local employees to browse using the same PVWA URL.

DChange the current distributed Vaults architecture, migrate back to a Primary-DR architecture, install two new PVWA servers in the Tokyo data center and configure load balancing. Connect to the local DR Vault and provide the URL of new PVWA servers to the local employees.

Answer : A

Question 6

What is the purpose of the CPM_Preinstallation.ps1 script included with the CPM installation package?

AIt prompts for input parameters that will be used to pre-populate form fields in the installation wizard.

BIt automatically installs the CPM, requiring no additional user input.

CIt allows you to install the CPM using a command line approach rather than using the installation wizard.

DIt verifies the NET version installed on the server and sets the IIS SSL TLS server configuration.

Answer : D

Question 7

Which tools are used during a CPM renaming process? (Choose two.)

AAPIKeyManager Utility Most Voted

BCreateCredFile Utility Most Voted

CCPMInDomain_Hardening.ps1

DPMTerminal.exe

EData Execution Prevention

Answer : A, D

CyberArk PAM-SEN CyberArk Sentry - PAM Exam Practice Test