CyberArk PAM-SEN Exam Practice Test Instant Access

Question 1

A customer has five main data centers with one PVWA in each center under different URLs.

How can you make this setup fault tolerant?

AThis setup is already fault tolerant.

BInstall more PVWAs in each data center.

CContinuously monitor PVWA status and send users the link to another PVWA if issues are encountered.

DLoad balance all PVWAs under same URL.

Answer : D

Question 2

In which file must the attribute 'SignAuthnRequest=''true''' be added to the PartnerIdentityProvider element to support signed SAML requests?

Asaml.config

Bsamlconfig.ini

CPVWAConfig.xml

DPVConfiguration.xml

Answer : C

Question 3

Your customer upgraded recently to version 12.2 to allow the Linux team to use the new MFA caching feature. The PSM for SSH was installed with default configuration settings. After setting the Authentication to SSH key and enabling MFA Caching from the PVWA interface, the Linux Team cannot connect successfully using the new MFA caching feature.

What is the most probable cause?

AOpenSSH 7.8 or above is not installed.

BThe MFACaching parameter in the psmpparms file is not set to True.

CA passphrase policy must be added.

DMFA caching is not supported when the PSM for SSH is deployed with default settings.

Answer : D

Question 4

A customer is moving from an on-premises to a public cloud deployment.

What is the best and most cost-effective option to secure the server key?

AInstall the Vault in the cloud the same way you would in an on-premises environment. Place the server key in a password protected folder on the operating system.

BInstall the Vault in the cloud the same way you would in an on-premises environment. Purchase a Hardware Security Module to secure the server key.

CInstall the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.

DInstall the Vault using the native cloud images and secure the server key with a Hardware Security Module.

Answer : C

Question 5

Which parameter must be identical for both the Identity Provider (IdP) and the PVWA?

AIdP ''EntityID'' and ''PartnerIdentityProvider Name'' in PVWA saml.config file

BIdP ''User name'' and ''SingleSignOnServiceUrl'' in PVWA saml.config file

CIdP ''Audience'' and ''ServiceProviderName'' in the PVWA saml.config file

DIdP ''Secure hash algorithm'' and ''Certificate'' in the PVWA saml.config file

Answer : C

Question 6

What is the purpose of the PSM health check hardening?

ARemove IIS settings which can be considered security vulnerabilities.

BValidate that the PSM is ready to be placed behind a load balancer.

CConfirm that the Windows Services for PSM are running on the server.

DEnsure that the AppLocker script does not have any syntax errors.

Answer : A

Question 7

A customer's environment has three data centers consisting of 5,000 servers in Germany, 10,000 servers in Canada, and 1,500 servers in Singapore. You want to manage target servers and avoid complex firewall rules. How many CPMs should you deploy?

B3 total, 1 per data center

C15

D6 total, 2 per data center

Answer : B

CyberArk PAM-SEN CyberArk Sentry - PAM Exam Practice Test