PAM-SEN Exam Questions

Which statements are correct about the PSM HTML5 gateway? (Choose two.)

You want to change the name of the PVWAappuser of the second PVWA server. Which steps are part of the process? (Choose two.)

What are the basic network requirements to deploy a CPM server?

What is the purpose of the CPM_Preinstallation.ps1 script included with the CPM installation package?

When configuring RADIUS authentication, which utility is used to create a file containing an encrypted version of the RADIUS secret?

What is required before the first CPM can be installed?

You are installing the HTML5 gateway on a Linux host using the RPM provided. After installing the Tomcat webapp, what is the next step in the installation process?

As a member of a PAM Level-2 support team, you are troubleshooting an issue related to load balancing four PVWA servers at two data centers. You received a note from your Level-1 s...

Which statement is correct about a post-install hardening?

Which command should be executed to harden a Vault after registering it to Azure?

After installing the Vault, you need to allow Firewall Access for Windows Time service to sync with NTP servers 10.1.1.1 and 10.2.2.2. What should you do?

In addition to disabling Windows services or features not needed for PVWA operations, which tasks does PVWA_Hardening.ps1 perform when run? (Choose two.)

In large-scale environments, it is important to enable the CPM to focus its search operations on specific Safes instead of scanning all Safes it sees in the Vault. How is this acco...

What is a prerequisite step before CyberArk can be configured to support RADIUS authentication?

Which file must you edit to ensure the PSM for SSH server is not hardened automatically after installation?

Which configuration file and Vault utility are used to migrate the server key to an HSM?

The account used to install a PVWA must have ownership of which safes? (Choose two.)

All 80 employees from your satellite Tokyo office are complaining that browsing the PVWA site is very slow; however, your New York headquarters users are not experiencing this. The...

Which parameter must be identical for both the Identity Provider (IdP) and the PVWA?

Which component should be installed on the Vault if Distributed Vaults are used with PSM?

You are installing PSM for SSH with AD-Bridge and CyberArkSSHD mode set to integrated for your customer. Which additional packages do you need to install to meet the customer's nee...

Which components can connect to a satellite Vault in a distributed Vault architecture?

In addition to bit rate and estimated total duration of recordings per day, what is needed to determine the amount of storage required for PSM recordings?

Which service must be set to Automatic (delayed start) after the Vault is installed and configured?

A customer is moving from an on-premises to a public cloud deployment. What is the best and most cost-effective option to secure the server key?

Your customer upgraded recently to version 12.2 to allow the Linux team to use the new MFA caching feature. The PSM for SSH was installed with default configuration settings. After...

In which file must the attribute `SignAuthnRequest="true"' be added to the PartnerIdentityProvider element to support signed SAML requests?

When creating a distributed Vault environment architecture, what is the maximum number of Vault servers that can be deployed?

HTML5 Gateway can be installed on which supported UNIX OS versions? (Choose two.)

Which statement about REST API is correct? (Choose two.)

A first PSM server has been installed. What should you confirm before installing any additional PSM servers?

In which configuration file on the Vault can filters be configured to either include or exclude log messages that are sent through SNMP?

How should you configure PSM for SSH to support load balancing?

You are installing multiple PVWAs behind a load balancer. Which statement is correct?

A customer has two data centers and requires a single PVWA url. Which deployment provides the fastest time to reach the PVWA and the most redundancy?

A customer has three data centers distributed globally and wants highly-available PSM connections in each segmented zone. In addition, the customer needs a highly-available PSM con...

A customer asked you to help scope the company's PSM deployment. What should be included in the scoping conversation?

A customer has five main data centers with one PVWA in each center under different URLs. How can you make this setup fault tolerant?

This value needs to be added to the PVWA configuration file: Assuming all CyberArk PVWA servers were installed using default paths/folders, which configuration file should you loca...

What must you do to synchronize a new Vault server with an organization's NTP server?

What would be a good use case for the Replicate module?

What is the PRIMARY reason for installing more than 1 active CPM?

What is the purpose of the password Reconcile process?

Which file would you modify to configure the vault to send SNMP traps to your monitoring solution?

When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.

In order to avoid conflicts with the hardening process, third party applications like Antivirus and Backup Agents should be installed on the Vault server before installing the Vaul...

If a transparent user matches two different directory mappings, how does the system determine which user template to use?

The primary purpose of the CPM is Password Management.

The vault server uses a modified version of the Microsoft Windows firewall.

In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es)