CyberArk Defender - PAM & Sentry - PAM - PAM-DEF-SEN Exam Practice Test

Question 1

In order to retrieve data from the vault a user MUST use an interface provided by CyberArk.

A. TRUE

B. FALSE

Correct Answer: A

Question 2

Which of the Following can be configured in the Master Policy? Choose all that apply

A. Ticketing Integration

B. Dual Control

C. Exclusive Passwords

D. Required Properties

E. Custom Connection Components

F. Password Aging Rules

G. Password Reconciliation

H. One Time Passwords

Correct Answer: B,C,F,H

Question 3

The PSM Gateway (also known as the HTML5 Gateway) can be installed

A. False, the PSM Gateway must be installed on a separate Windows machine

B. True

Correct Answer: B

Question 4

Which file does the Vault administrator need to edit in order to configure the integration of the Vault with the radius server?

A. ENEConf.ini

B. radius.ini

C. PARagent.ini

D. dbparm.ini

Correct Answer: D

Question 5

The Vault administrator can change the Vault license by uploading the new license to the system Safe.

A. True

B. False

Correct Answer: A

Question 6

After the Vault server is installed, the Microsoft Windows firewall is now commandeered by the Vault. Can the administrator change these firewall rules?

A. Yes, but the administrator can only modify the firewall rules by editing the FirewallRules.ini file and the restarting the Vault.

B. Yes, the administrator can still modify firewall rules via the Windows firewall interface.

C. Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the Vault.

D. No, the Vault does not permit any changes to the firewall due to security requirements.

Correct Answer: C

Question 7

Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

A. Auto Detection

B. Accounts Discovery

C. Onboarding RestAPI functions

D. PTA Rules

Correct Answer: A

Question 8

In the vault each password is encrypted with a unique encryption key.

A. TRUE

B. FALSE

Correct Answer: A

Question 9

Which of these accounts onboarding methods is considered proactive?

A. Detecting accounts with PTA

B. A DNA scan

C. Accounts Discovery

D. A Rest API integration with account provisioning software

Correct Answer: A

Question 10

The Vault Internal safe contains the configuration for an LDAP integration

A. TRUE

B. FALSE

Correct Answer: B

Question 11

When accessing the Vault via PVWA, is it possible, is it possible to configure multiple Dual Authentication Methods?

A. No, dual authentication methods are not supported.

B. Yes, all authentication methods will be configured to use the Vault integrated authentication flow.

C. Yes, all authentication methods will be configured to use the IIS integrated authentication flow.

D. Yes, authentication methods will be configured to use the combination of IIS and Vault integrated authentication flow.

Correct Answer: D

Question 12

To support a fault tolerant and high-availability architecture, the Password Vault Web Access (PVWA) servers must to be configured to communicate with the Primary Vault and Satellite Vaults.
Which file needs to be changed on the PVWA to enable this setup?

A. pvwa.ini

B. Vault.ini

C. Satellite.ini

D. dbparm.ini

Correct Answer: B

Question 13

Multiple PVWA servers can be load balanced.

A. TRUE

B. FALSE

Correct Answer: B

Question 14

A safe was recently created by a user who is a member of the LDAP Vault Administrators group.
Which of the following users does not have access to the newly created safe by default?

A. Administrator

B. Backup

C. Auditor

D. Master

Correct Answer: B

CyberArk Defender - PAM & Sentry - PAM - PAM-DEF-SEN Exam Practice Test

Latest Update

Useful Links

Contact Us