CyberArk PAM-SEN Exam Dumps (V10.02) – Updated Practice Test to Ensure Your Success

1. What would be a good use case for the Replicate module?

2. What is the PRIMARY reason for installing more than 1 active CPM?

3. What is the purpose of the password Reconcile process?

4. Which file would you modify to configure the vault to send SNMP traps to your monitoring solution?

5. When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.

6. In order to avoid conflicts with the hardening process, third party applications like Antivirus and Backup Agents should be installed on the Vault server before installing the Vault.

7. If a transparent user matches two different directory mappings, how does the system determine which user template to use?

8. The primary purpose of the CPM is Password Management.

9. The vault server uses a modified version of the Microsoft Windows firewall.

10. In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es)

11. What would be a good use case for a High Availability vault?

12. What are the operating system prerequisites for installing CPM? Select all that apply.

13. A vault admin received an email notification that a password verification process has failed.

Which service sent the message?

14. A stand alone Vault server requires DNS services to operate properly.

15. The connect button requires PSM to work.

16. After a PSM session is complete, the PSM server uploads the recording to the Vault for long-term storage.

17. By default, the vault secure protocol uses which IP port and protocol.

18. What is the best practice for storing the Master CD?

19. What utility is used to create or update a credential file?

20. You are successfully managing passwords in the alpha cyberark com domain; however, when you attempt to manage a password in the beta cyberark com domain, you receive the 'network path not found' error.

What should you check first?

21. What is the name of the account used to establish the initial RDP session from the end user client machine to the PSM server?

22. To apply a new license file you must:

23. At what point is a transparent user provisioned in the vault?

24. Which of the following are supported authentication methods for CyberArk? Check all that apply

25. The security of the Vault Server is entirely dependent on the security of the network.

26. What would be a good use case for the Disaster Recovery module?

27. Which is the correct order of installation for PAS components?

28. The RemoteApp feature of PSM allows seamless Application windows (i e the Desktop of the PSM server will not be visible)

29. Does CyberArk need service accounts on each server to change passwords?

30. Which of the following protocols need to be installed on a standalone vault server? Check all that apply.

31. Which of the following are prerequisites for installing PVWA Check all that Apply.

32. In order to retrieve data from the vault a user MUST use an interface provided by CyberArk.

33. Name two ways of viewing the ITAlog

34. Which CyberArk component changes passwords on Target Devices?

35. In an SMTP integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SMTP server address(es)

36. The PrivateArk clients allows a user to view the contents of the vault like a filesystem.

37. Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply

38. The Remote Desktop Services role must be property licensed by Microsoft.

39. Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?

40. Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

41. What is a requirement for setting fault tolerance for PSMs?

42. What is a valid combination of primary and secondary layers of authentication to a company's two-factor authentication policy?

43. A customer wants to store PSM recordings for 100 days and estimates they will have 10 Windows sessions per day for 100 minutes each.

What is the minimum storage required for the Vault and PAReplicate for the PSM recordings?

44. CyberArk User Neil is trying to connect to the Target Linux server 192.168.1.164 using a domain account ACME/linuxuser01 on domain acme.corp using PSM for SSH server 192.168.65.145.

What is the correct syntax?

45. During the PSM installation process, Safes and a User are created.

In addition to Add Safes, Add/Update Users, Reset Users’ Passwords, and Activate Users, which authorization(s) does the Vault user installing the PSM need to enable them to be successfully created?

46. What authentication methods can be implemented to enforce Two-Factor Authentication (2FA) for users authenticating to CyberArk using both the PVWA (through the browser) and the PrivateArk Client?

47. DRAG DROP -

Arrange the steps to complete CPM Hardening for Out-of-Domain Deployment in the correct sequence.

48. In which configuration file do you add LoadBalancerClientAddressHeader when you enable x-forwarding on the PVWA loadbalancer?

49. You want to add an additional maintenance user on the PSM for SSH.

How can you accomplish this if InstallCyberarkSSHD is set to Integrated?

50. There is a requirement for a password to change between 01:00 and 03:00 on Saturdays and Sundays; however, this does not work consistently.

Which platform setting may be the cause?