CyberArk PAM-SEN Exam Practice Test Instant Access

Question 1

What must you do to synchronize a new Vault server with an organization's NTP server?

AConfigure an AllowNonStandardFWAddresses rule for the organization's NTP server in DBParm.ini on the Vault server.

BUse the Windows Firewall console to configure a rule on the Vault server which allows communication with the organization's NTP server.

CEnsure the organization's NTP server is installed in the same location as the Vault server requiring synchronization.

DUpdate the AutoSyncExternalObjects configuration in DBParm.ini on the Vault server to schedule regular synchronization.

Answer : A

Question 2

In which file must the attribute 'SignAuthnRequest=''true''' be added to the PartnerIdentityProvider element to support signed SAML requests?

Asaml.config

Bsamlconfig.ini

CPVWAConfig.xml

DPVConfiguration.xml

Answer : C

Question 3

Your customer upgraded recently to version 12.2 to allow the Linux team to use the new MFA caching feature. The PSM for SSH was installed with default configuration settings. After setting the Authentication to SSH key and enabling MFA Caching from the PVWA interface, the Linux Team cannot connect successfully using the new MFA caching feature.

What is the most probable cause?

AOpenSSH 7.8 or above is not installed.

BThe MFACaching parameter in the psmpparms file is not set to True.

CA passphrase policy must be added.

DMFA caching is not supported when the PSM for SSH is deployed with default settings.

Answer : D

Question 4

A customer is moving from an on-premises to a public cloud deployment.

What is the best and most cost-effective option to secure the server key?

AInstall the Vault in the cloud the same way you would in an on-premises environment. Place the server key in a password protected folder on the operating system.

BInstall the Vault in the cloud the same way you would in an on-premises environment. Purchase a Hardware Security Module to secure the server key.

CInstall the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.

DInstall the Vault using the native cloud images and secure the server key with a Hardware Security Module.

Answer : C

Question 5

Which parameter must be identical for both the Identity Provider (IdP) and the PVWA?

AIdP ''EntityID'' and ''PartnerIdentityProvider Name'' in PVWA saml.config file

BIdP ''User name'' and ''SingleSignOnServiceUrl'' in PVWA saml.config file

CIdP ''Audience'' and ''ServiceProviderName'' in the PVWA saml.config file

DIdP ''Secure hash algorithm'' and ''Certificate'' in the PVWA saml.config file

Answer : C

Question 6

What is the purpose of the CPM_Preinstallation.ps1 script included with the CPM installation package?

AIt prompts for input parameters that will be used to pre-populate form fields in the installation wizard.

BIt automatically installs the CPM, requiring no additional user input.

CIt allows you to install the CPM using a command line approach rather than using the installation wizard.

DIt verifies the NET version installed on the server and sets the IIS SSL TLS server configuration.

Answer : D

Question 7

Which tools are used during a CPM renaming process? (Choose two.)

AAPIKeyManager Utility Most Voted

BCreateCredFile Utility Most Voted

CCPMInDomain_Hardening.ps1

DPMTerminal.exe

EData Execution Prevention

Answer : A, D

CyberArk PAM-SEN CyberArk Sentry - PAM Exam Practice Test