PAM-SEN CyberArk Exam Questions and Free Practice Test

Question 25

You are configuring the Vault to send syslog audit data to your organization’s SIEM solution.
What is a valid value for the SyslogServerProtocol parameter in DBPARM.INI file?

A. TLS

B. SSH

C. SMTP

D. SNMP

Correct Answer:A

Question 26

The Remote Desktop Services role must be property licensed by Microsoft.

A. TRUE

B. FALSE

Correct Answer:A

Question 27

Which statement is correct about a post-install hardening?

A. The Vault must be hardened during the Vault installation proces

B. Most Voted

C. After the Vault server is installed, you must join the server to the Enterprise Domain and reboot the host.

D. It is executed after Vault installation by running CAVaultHarden.exe and hardening options can be edited by changing the Hardening.ini fil

E. Most Voted

F. If it is mandated by an organization’s IT governance, you do not have to execute Vault hardening; however, server hardening cannot be reversed.

Correct Answer:C

Question 28

You have been asked to limit a platform called “Windows_Servers” to safes called “WindowsDC1” and “WindowsDC2”. The platform must not be assigned to any other safe.
What is the correct way to accomplish this?

A. Edit the “Windows_Servers” platform, expand “Automatic Password Management”, thenselect General and modify “AllowedSafes” to be (WindowsDC1)|(WindowsDC2).

B. Edit the “Windows_Servers” platform, expand “Automatic Password Management”, then select Options and modify “AllowedSafes” to be (Win*).

C. Edit the “WindowsDC1” and “WindowsDC2” safes through Safe Management, Add “Windows_Servers” to the “AllowedPlatforms”.

D. Log in to PrivateArk using an Administrative user, Select File, Server File Categories, Locate the category “WindowsServersAllowedSafes” and specify “WindowsDC1,WindowsDC2”.

Correct Answer:A

Question 29

In large-scale environments, it is important to enable the CPM to focus its search operations on specific Safes instead of scanning all Safes it sees in the Vault.
How is this accomplished?

A. Administration Options > CPM Settings

B. AllowedSafe Parameter on each platform policy

C. MaxConcurrentConnection parameter on each platform policy

D. Administration > Options > CPM Scanner

Correct Answer:B

Question 30

You are installing multiple PVWAs behind a load balancer.
Which statement is correct?

A. Port 1858 must be opened between the load balancer and the PVWAs.

B. The load balancer must be configured in DNS round robin.

C. The load balancer must support "sticky sessions".

D. The LoadBalancerClientAddressHeader parameter in the PVWA.ini file must be set.

Correct Answer:C

START PAM-SEN EXAM