CyberArk Sentry - PAM - PAM-SEN Exam Practice Test

Question 1

Which configuration file and Vault utility are used to migrate the server key to an HSM?

A. DBparm.ini and CAVaultManager.exe

B. VaultKeys.ini and CAVaultManager.exe

C. VaultKeys.ini and ChangeServerKeys.exe

D. DBparm.ini and ChangeServerKeys.exe

Correct Answer: C

Question 2

What is the recommended method to determine if a PVWA is unavailable and should be disabled in a load balancing pool?

A. Ping the PVWA server

B. Monitor Port 3389 on the PVWA server

C. Monitor Port 443 on the PVWA server

D. Monitor Port 1858 on the PVWA server

Correct Answer: D

Question 3

You are beginning the post-install process after a manual PSM installation is completed.
What must you do?

A. Disable screen saver for the PSM local users.

B. Enable load balancing on the PSM server.

C. Reset the PSMAdminConnect user password.

D. Create a new group called PSMShadowUsers.

Correct Answer: A

Question 4

Arrange the steps to failover to the DR CPM in the correct sequence.

Correct Answer:

Question 5

As Vault Admin, you have been asked to enable your organization's CyberArk users to authenticate using LDAP.
In addition to Audit Users, which permission do you need to complete this task?

A. Activate Users

B. Add/Update Users

C. Manage Directory Mapping

D. Add Network Areas

Correct Answer: C

Question 6

Which service must be set to Automatic (delayed start) after the Vault is installed and configured?

A. PrivateArk Server

B. Windows Time service

C. PrivateArk Database

D. Windows Update service

Correct Answer: B

Question 7

A first PSM server has been installed.
What should you confirm before installing any additional PSM servers?

A. The user performing the installation is a direct owner in the PSMUnmanagedSessionAccounts Safe, PSM safe and member of PVWAMonitor group.

B. The PSM ID of the first installed PSM server was changed and the additional PSM server can use the same PSM ID.

C. The user performing the installation is not a direct owner in the PSMUnmanagedSessionAccounts Safe.
Most Voted

D. The path of the Recordings Folder must be different on all PSM installations.

Correct Answer: C

Question 8

A customer's environment has three data centers consisting of 5,000 servers in Germany, 10,000 servers in Canada, and 1,500 servers in Singapore. You want to manage target servers and avoid complex firewall rules.
How many CPMs should you deploy?

A. 1

B. 6 total, 2 per data center

C. 3 total, 1 per data center

D. 15

Correct Answer: C

Question 9

Which component should be installed on the Vault if Distributed Vaults are used with PSM?

A. Distributed Vault Server

B. RabbitMQ

C. Disaster Recovery

D. Remote Control Client

Correct Answer: B

Question 10

A customer has five main data centers with one PVWA in each center under different URLs.
How can you make this setup fault tolerant?

A. This setup is already fault tolerant.

B. Continuously monitor PVWA status and send users the link to another PVWA if issues are encountered.

C. Load balance all PVWAs under same URL.

D. Install more PVWAs in each data center.

Correct Answer: C

CyberArk Sentry - PAM - PAM-SEN Exam Practice Test

Latest Update

Useful Links

Contact Us