PAM-SEN Exam Questions
136 real PAM-SEN exam questions with expert-verified answers and explanations. Page 3 of 3.
- Question #101Managing and Protecting Privileged Accounts and Credentials (Advanced)
If a transparent user matches two different directory mappings, how does the system determine which user template to use?
directory mappinguser templatestransparent usersvault authorization - Question #102Managing and Protecting Privileged Accounts and Credentials (Advanced)
The primary purpose of the CPM is Password Management.
CPMpassword managementcomponent roles - Question #103Security Best Practices and Hardening
The vault server uses a modified version of the Microsoft Windows firewall.
vault serverfirewallinfrastructure hardening - Question #104Integrations with External Systems
In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es)
SIEM integrationFQDNserver configuration - Question #105Disaster Recovery and High Availability
What would be a good use case for a High Availability vault?
high availabilityRTORPOvault redundancy - Question #106Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
What are the operating system prerequisites for installing CPM? Select all that apply.
CPM installationprerequisites.NET FrameworkWindows - Question #107Advanced Auditing, Reporting and Troubleshooting
A vault admin received an email notification that a password verification process has failed Which service sent the message?
Event Notification Enginepassword verificationvault servicesnotifications - Question #108Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
What is a step to enable NTP synchronization on a stand-alone Vault?
NTP synchronizationdbparm.inivault configurationfirewall rules - Question #109Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
A customer's environment has three data centers consisting of 5,000 servers in Germany, 10,000 servers in Canada, and 1,500 servers in Singapore. You want to manage target servers...
CPM deploymentdata center architecturescalabilityfirewall complexity - Question #110Security Best Practices and Hardening
What is the purpose of the PSM health check hardening?
PSM hardeningIIS securityhealth checkvulnerability remediation - Question #111Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
Which statement is correct about CPM behavior in a distributed Vault environment?
distributed vaultCPM behaviorprimary vaultsatellite vault - Question #112Managing and Monitoring Privileged Sessions (Advanced)
Which authentication methods does PSM for SSH support?
PSM for SSHauthentication methodsRADIUSLDAP - Question #113Managing and Monitoring Privileged Sessions (Advanced)
Which browser is supported for PSM Web Connectors developed using the CyberArk Plugin Generator Utility (PGU)?
PSM Web ConnectorsPlugin Generator Utilitybrowser supportChrome - Question #114Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
Which pre-requisite step must be completed before installing a Vault?
vault installationprerequisitesclean operating system - Question #115Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
Which step is required to register a Vault manually in Amazon Web Services using CAVaultManager?
AWS deploymentCAVaultManagerCloudRegion flagcloud registration - Question #116Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
Which tools are used during a CPM renaming process? (Choose two.)
CPM renamingAPIKeyManagerPMTerminalutilities - Question #117Security Best Practices and Hardening
The security of the Vault Server is entirely dependent on the security of the network.
vault securitynetwork independencedefense in depthhardening - Question #118Disaster Recovery and High Availability
What would be a good use case for the Disaster Recovery module?
disaster recoveryoff-site replicationDR modulevault replication - Question #119Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
Which is the correct order of installation for PAS components?
PAS installation orderVaultCPMPVWA PSM sequence - Question #120Managing and Monitoring Privileged Sessions (Advanced)
The RemoteApp feature of PSM allows seamless Application windows (i e the Desktop of the PSM server will not be visible)
PSM RemoteAppseamless applicationssession managementPSM desktop - Question #121Managing and Protecting Privileged Accounts and Credentials (Advanced)
Does CyberArk need service accounts on each server to change passwords?
CPMpassword managementservice accountstarget systems - Question #122Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
Which of the following protocols need to be installed on a standalone vault server? Check all that apply.
vault installationnetwork protocolsstandalone vaultNIC configuration - Question #123Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
Which of the following are prerequisites for installing PVWA Check all that Apply.
PVWA installationprerequisitesWindows rolesWeb Services - Question #124Security Best Practices and Hardening
In order to retrieve data from the vault a user MUST use an interface provided by CyberArk.
vault accessdata retrievalCyberArk interfacevault security - Question #125Advanced Auditing, Reporting and Troubleshooting
Name two ways of viewing the ITAlog
ITAlogaudit logsPrivateArk clientSystem Safe - Question #126Managing and Protecting Privileged Accounts and Credentials (Advanced)
Which CyberArk component changes passwords on Target Devices?
CPMpassword rotationtarget devicesCyberArk components - Question #127Integrations with External Systems
In an SMTP integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SMTP server address(es)
SMTP integrationFQDNnotification configurationemail alerts - Question #128Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
The PrivateArk clients allows a user to view the contents of the vault like a filesystem.
PrivateArk clientvault interfacefilesystem viewvault navigation - Question #129Security Best Practices and Hardening
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all t...
Operator CDserver keyHSMvault key storage - Question #130Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
A stand alone Vault server requires DNS services to operate properly.
standalone vaultDNS requirementsnetwork configurationvault server - Question #131Managing and Monitoring Privileged Sessions (Advanced)
The connect button requires PSM to work.
PSMconnect buttonPVWAprivileged sessions - Question #132Managing and Monitoring Privileged Sessions (Advanced)
After a PSM session is complete, the PSM server uploads the recording to the Vault for long-term storage.
PSMsession recordingvault storagelong-term retention - Question #133Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
By default, the vault secure protocol uses which IP port and protocol.
vault protocolTCP/1858network portCyberArk protocol - Question #134Security Best Practices and Hardening
What is the best practice for storing the Master CD?
Master CDkey managementsecurity best practicesvault recovery - Question #135Secure Privileged Access Management (PAM) Solution Deployment (Advanced)
What utility is used to create or update a credential file?
CreateCredFilecredential fileutilitycomponent configuration - Question #136Advanced Auditing, Reporting and Troubleshooting
You are successfully managing passwords in the alpha cyberark com domain; however, when you attempt to manage a password in the beta cyberark com domain, you receive the 'network p...
CPM troubleshootingDNS resolutionmulti-domainnetwork connectivity