Get Apr-2024 Dumps to Pass your PAM-SEN Exam with 100% Real Questions and Answers
Updated Exam PAM-SEN Dumps with New Questions
NEW QUESTION # 77
All 80 employees from your satellite Tokyo office are complaining that browsing the PVWA site is very slow; however, your New York headquarters users are not experiencing this. The current PAM solution is:
2 distributed Vaults, the primary one in New York and a satellite in Tokyo
2 PVWA servers, both in New York with load balancing configured
2 PSM servers, both in New York without load balancing configured
1 CPM server in New York
All PVWA, PSM, and CPM servers are connected to the primary Vault
Which proposal optimally resolves the performance issue while minimizing the impact to production?
- A. Install two new PVWA servers in Tokyo data center, configure load balancing, connect to the local satellite Vault and provide the URL of new PVWA servers to the local employees.
- B. Install two new PSM servers in the Tokyo data center, configure load balancing, connect to the local satellite vault, and inform the local employees to browse using the same PVWA URL.
- C. Install two new PVWA servers in New York data center, configure load balancing and have them connect to the satellite Vault in Tokyo.
- D. Change the current distributed Vaults architecture, migrate back to a Primary-DR architecture, install two new PVWA servers in the Tokyo data center and configure load balancing. Connect to the local DR Vault and provide the URL of new PVWA servers to the local employees.
Answer: A
NEW QUESTION # 78
Which browser is supported for PSM Web Connectors developed using the CyberArk Plugin Generator Utility (PGU)?
- A. Google Chrome
- B. Firefox
- C. Internet Explorer
- D. Opera
Answer: A
NEW QUESTION # 79
What are the operating system prerequisites for installing CPM? Select all that apply.
- A. .NET 3.51 Framework Feature
- B. Remote Desktop Services Role
- C. Windows 2008 R2 or higher.
- D. Web Services Role
Answer: A
NEW QUESTION # 80
A customer has five PVWA servers. Three are located at the primary data center and the remaining two are at a satellite data center.
What is important to consider about the load balancer? (Choose two.)
- A. It must not alter page content, or should include a mechanism to prevent pages from being altered. Most Voted
- B. It must be configured with high-availability (HA) enabled.
- C. It must be able to digitally sign and issue certificates for PVWA servers.
- D. It must support "sticky sessions". Most Voted
- E. It must be able to connect to all Vault and PVWA servers through Port TCP 443.
Answer: A,D
NEW QUESTION # 81
At what point is a transparent user provisioned in the vault?
- A. When a vault admin runs LDAP configuration wizard.
- B. When a directory mapping matching that user id is created.
- C. During the vault's nightly LD|^P refresh
- D. The first time the user logs in.
Answer: B
NEW QUESTION # 82
Which CyberArk component changes passwords on Target Devices?
- A. PrivateArk
- B. PSM
- C. AIM
- D. Vault
- E. CPM
- F. OPM
- G. PVWA
Answer: B,E,G
NEW QUESTION # 83
Which service must be set to Automatic (delayed start) after the Vault is installed and configured?
- A. Windows Update service
- B. PrivateArk Server
- C. Windows Time service
- D. PrivateArk Database
Answer: C
NEW QUESTION # 84
In which file must the attribute 'SignAuthnRequest="true"' be added to the PartnerIdentityProvider element to support signed SAML requests?
- A. saml.config
- B. samlconfig.ini
- C. PVConfiguration.xml
- D. PVWAConfig.xml
Answer: D
NEW QUESTION # 85
In addition to disabling Windows services or features not needed for PVWA operations, which tasks does PVWA_Hardening.ps1 perform when run? (Choose two.)
- A. configures Windows Firewall
- B. imports the CyberArk INF configuration
- C. performs IIS hardening
- D. configures all group policy settings
- E. renames the local Administrator Account
Answer: A,C
NEW QUESTION # 86
You are installing the HTML5 gateway on a Linux host using the RPM provided.
After installing the Tomcat webapp, what is the next step in the installation process?
- A. Deploy the HTML5 service (guacd). Most Voted
- B. Secure the connection between the guacd and the webapp.
- C. Secure the webapp and JWT validation endpoint.
- D. Configure ASLR.
Answer: B
NEW QUESTION # 87
What would be a good use case for the Replicate module?
- A. PSM is used.
- B. Recovery Time Objectives or Recovery Point Objectives are at or near zero.
- C. Off site replication is required.
- D. Integration with an Enterprise Backup Solution is required.
Answer: C
NEW QUESTION # 88
What is a step to enable NTP synchronization on a stand-alone Vault?
- A. Run Powershell and add the NTP module.
- B. Edit dbparm.ini and add a Firewall rule for the NTP address.
- C. Restart the Vault Event Notification Engine service.
- D. Restart the organization's NTP servers.
Answer: B
NEW QUESTION # 89
You are beginning the post-install process after a manual PSM installation is completed.
What must you do?
- A. Reset the PSMAdminConnect user password.
- B. Create a new group called PSMShadowUsers.
- C. Enable load balancing on the PSM server.
- D. Disable screen saver for the PSM local users.
Answer: D
NEW QUESTION # 90
Which pre-requisite step must be completed before installing a Vault?
- A. Join the server to a domain.
- B. Install antivirus software.
- C. Install a clean operating system.
- D. Copy the master CD to a folder on the Vault server.
Answer: C
NEW QUESTION # 91
-
The installCyberArkSSHD parameter on the PSM for SSH can be set to multiple values.
Match each value to the correct condition.
Answer:
Explanation:
NEW QUESTION # 92
You want to add an additional maintenance user on the PSM for SSH.
How can you accomplish this if InstallCyberarkSSHD is set to Integrated?
- A. Create a local user called proxymng.
- B. Create a local user and add it to the PSMMaintenance Group.
- C. Create a local user, called psmpmng.
- D. Create a local user and add it to group configured for the parameter AllowGroups in the /etc/sshd_config file
Answer: D
NEW QUESTION # 93
Which configuration file and Vault utility are used to migrate the server key to an HSM?
- A. DBparm.ini and CAVaultManager.exe
- B. VaultKeys.ini and CAVaultManager.exe
- C. VaultKeys.ini and ChangeServerKeys.exe
- D. DBparm.ini and ChangeServerKeys.exe
Answer: C
NEW QUESTION # 94
The security of the Vault Server is entirely dependent on the security of the network.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION # 95
What must you do to prepare a Windows server for PVWA installation?
- A. Install the PrivateArk client.
- B. Verify the user performing the installation is Domain Administrator and has logon access to the Vault server.
- C. Enable IPv6.
- D. In the InstallationAutomation folder, run the PVWA_Prerequisites.ps1 file as an administrator in Powershell. Most Voted
Answer: D
NEW QUESTION # 96
A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication.
Which locations must you update?
- A. on the Vault server in C:\Windows\System32\drivers\etc\hosts and in the PVWAApplication under Administration > LDAP Integration > Directories > Hosts
- B. in the Private Ark client under Tools > Administrative Tools > Directory Mapping
- C. on the Vault server in the certificate store and on the PVWA server in the certificate store
- D. on both the Vault and the PVWA servers in C:\Windows\System32\drivers\etc\hosts
Answer: A
NEW QUESTION # 97
What is the name of the account used to establish the initial RDP session from the end user client machine to the PSM server?
- A. PSMConnect
- B. PSMAdminConnect
- C. The credentials the end user retrieved from the vault.
- D. PSM
Answer: A
NEW QUESTION # 98
......
CyberArk Sentry – PAM exam is intended for professionals who are responsible for implementing and managing PAM solutions using CyberArk Sentry technology. This includes system administrators, security administrators, network administrators, and other IT professionals who are responsible for securing privileged access to critical systems and data. PAM-SEN exam is also suitable for consultants and integrators who work with CyberArk Sentry technology and want to validate their knowledge and skills.
100% Pass Guarantee for PAM-SEN Exam Dumps with Actual Exam Questions: https://www.prep4sureguide.com/PAM-SEN-prep4sure-exam-guide.html
Today Updated PAM-SEN Exam Dumps Actual Questions: https://drive.google.com/open?id=1ejFBNU6W2XWwEtIVf3lXOHPjUoto57zU