PAM-SEN CyberArk Exam Questions and Free Practice Test

Question 31

At what point is a transparent user provisioned in the vault?

A. When a directory mapping matching that user id is created.

B. When a vault admin runs LDAP configuration wizard.

C. The first time the user logs in.

D. During the vault's nightly LD|^P refresh

Correct Answer:A

Question 32

As a member of a PAM Level-2 support team, you are troubleshooting an issue related to load balancing four PVWA servers at two data centers. You received a note from your Level-1 support team stating “When testing PVWA website from a workstation, we noticed that the “Source IP of last sign-in” was shown as the VIP (Virtual IP address) assigned to the four PVWA servers instead of the workstation IP where the PVWA site was launched from.”
Which step should you take?

A. Verify the “LoadBalancerClientAddressHeader” parameter setting in PVWA configuration file Web.config is set to “X-Forwarded-For”.

B. Add the VIP (Virtual IP address) assigned to the four PVWA servers to the certificates issued for all four PVWA servers, if missing.

C. Add a firewall rule to allow the testing workstation to connect to the VIP (Virtual IP address) assigned to the four PVWA servers on Port TCP 443.

D. Edit the dbparm.ini file on the Vault server and add the IP or subnet of the workstation tothe whitelist.

Correct Answer:A

Question 33

A customer has five main data centers with one PVWA in each center under different URLs.
How can you make this setup fault tolerant?

A. This setup is already fault tolerant.

B. Install more PVWAs in each data center.

C. Continuously monitor PVWA status and send users the link to another PVWA if issues are encountered.

D. Load balance all PVWAs under same URL.

Correct Answer:D

Question 34

A stand alone Vault server requires DNS services to operate properly.

A. TRUE

B. FALSE

Correct Answer:B

START PAM-SEN EXAM