PAM-SEN Exam Questions

What is the name of the account used to establish the initial RDP session from the end user client machine to the PSM server?

To apply a new license file you must:

At what point is a transparent user provisioned in the vault?

Which of the following are supported authentication methods for CyberArk? Check all that apply

The Remote Desktop Services role must be property licensed by Microsoft.

Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?

Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

What is a requirement for setting fault tolerance for PSMs?

What is a valid combination of primary and secondary layers of authentication to a company's two- factor authentication policy?

A customer wants to store PSM recordings for 100 days and estimates they will have 10 Windows sessions per day for 100 minutes each. What is the minimum storage required for the Va...

CyberArk User Neil is trying to connect to the Target Linux server 192.168.1.164 using a domain account ACME/linuxuser01 on domain acme.corp using PSM for SSH server 192.168.65.145...

During the PSM installation process, Safes and a User are created. In addition to Add Safes, Add/Update Users, Reset Users' Passwords, and Activate Users, which authorization(s) do...

What authentication methods can be implemented to enforce Two-Factor Authentication (2FA) for users authenticating to CyberArk using both the PVWA (through the browser) and the Pri...

In which configuration file do you add LoadBalancerClientAddressHeader when you enable x- forwarding on the PVWA loadbalancer?

You want to add an additional maintenance user on the PSM for SSH. How can you accomplish this if InstallCyberarkSSHD is set to Integrated?

There is a requirement for a password to change between 01:00 and 03:00 on Saturdays and Sundays; however, this does not work consistently. Which platform setting may be the cause?

What is the default username for the PSM for SSH maintenance user when InstallCyberarkSSHD is set to yes?

Which SMTP address can be set on the Notification Settings page to re-invoke the ENE setup wizard after the initial Vault installation?

Before the hardening process, your customer identified a PSM Universal Connector executable that will be required to run on the PSM. Which file should you update to allow this to r...

You want to improve performance on the CPM by restricting accounts for the CYBRWINDAD platform to only the WINDEMEA and WINDEMEA_Admin safes. How do you set this in CyberArk?

What is a prerequisite step before installing the Vault on Windows 2019?

When performing "In Domain" hardening of a PSM server, which steps must be performed? (Choose two.)

Which files does the Vault Installation Wizard prompt you for during the Vault install?

You are designing the number of PVWAs a customer must deploy. The customer has three data centers with a distributed Vault in each, requires high availability, and wants to use all...

Which method can be used to directly authenticate users to PSM for SSH? (Choose three.)

Which components support load balancing? (Choose two.)

When SAML authentication is used to sign in to the PVWA, which service performs the actual authentication?

When integrating a Vault with HSM, which file is uploaded to the HSM device?

You need to add a new PSM server to an existing CyberArk environment. What is the best way to determine the sizing of this server?

You have been asked to limit a platform called "Windows_Servers" to safes called "WindowsDC1" and "WindowsDC2". The platform must not be assigned to any other safe. What is the cor...

To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

You are configuring the Vault to send syslog audit data to your organization's SIEM solution. What is a valid value for the SyslogServerProtocol parameter in DBPARM.INI file?

Which utility should be used to register the Vault in Amazon Web Services?

What must you do to prepare a Windows server for PVWA installation?

Your customer wants to store the Safes Data on Vault Drive D instead of Drive C. Which file should you edit?

You are configuring SNMP remote monitoring for your organization's Vault servers. In the PARAgent.ini, which parameter specifies the destination of the Vault SNMP traps?

You are installing a CPM. In addition to Add Safes, Add/Update Users, Reset Users' Passwords and Manage Server File Categories, which Vault authorization(s) does a CyberArk user ne...

After installing the first PSM server and before installing additional PSM servers, you must ensure the user performing the installation is not a direct owner of which safe?

If a customer has one data center and requires fault tolerance, how many PVWAs should be deployed?

What is determined by the "MaxConcurrentConnections" setting within a platform?

You are setting up a Linux host to act as an HTML 5 gateway for PSM sessions. Which servers need to be trusted by the Linux host to secure communications through the gateway?

Which component must be installed before the first CPM installation?

Which parameter must be provided when registering a primary Vault in Azure, but not in Amazon Web Services?

For redundancy, you want to add a secondary RADIUS server. What must you do to accomplish this?

What is the recommended method to determine if a PVWA is unavailable and should be disabled in a load balancing pool?

Which user is enabled when replicating data between active and stand-by Vaults?

As Vault Admin, you have been asked to enable your organization's CyberArk users to authenticate using LDAP. In addition to Audit Users, which permission do you need to complete th...

You are beginning the post-install process after a manual PSM installation is completed. What must you do?

A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication. Which locations must you...

A customer has five PVWA servers. Three are located at the primary data center and the remaining two are at a satellite data center. What is important to consider about the load ba...