최신 PAM-SEN 무료덤프 - CyberArk Sentry

문제1

When creating a distributed Vault environment architecture, what is the maximum number of Vault servers that can be deployed?

A. 3 - all primary

B. 10 - 2 primary and 8 satellite

C. 6 - 1 primary and 5 satellite

D. 5 - number of primary and satellite Vaults can be specified during installation

정답: C

문제2

What is the name of the account used to establish the initial RDP session from the end user client machine to the PSM server?

A. The credentials the end user retrieved from the vault

B. PSM

C. PSMAdminConnect

D. PSMConnect

정답: D

문제3

When performing "In Domain" hardening of a PSM server, which steps must be performed? (Choose two.)

A. Link GPO to a dedicated OU containing CyberArk PSM servers. Most Voted

B. Import CyberArk policy settings from the provided file into a new GPO. Most Voted

C. Configure AppLocker rules to block running unknown executables.

D. Import an INF file to the local machine.

E. Apply advanced audit on the PSM server.

정답: A,B

문제4

What is the purpose of the password Reconcile process?

A. To test that CyberArk is storing accurate credentials for accounts.

B. To generate a new complex password.

C. To allow CyberArk to manage unknown or lost credentials.

D. To change the password of an account according to organizationally defined password rules

정답: D

문제5

A customer has five PVWA servers. Three are located at the primary data center and the remaining two are at a satellite data center.
What is important to consider about the load balancer? (Choose two.)

A. It must be able to connect to all Vault and PVWA servers through Port TCP 443.

B. It must be configured with high-availability (HA) enabled.

C. It must be able to digitally sign and issue certificates for PVWA servers.

D. It must support "sticky sessions". Most Voted

E. It must not alter page content, or should include a mechanism to prevent pages from being altered. Most Voted

정답: D,E

문제6

What is a step to enable NTP synchronization on a stand-alone Vault?

A. Run Powershell and add the NTP module.

B. Restart the Vault Event Notification Engine service.

C. Restart the organization's NTP servers.

D. Edit dbparm.ini and add a Firewall rule for the NTP address.

정답: D

문제7

In which file must the attribute 'SignAuthnRequest="true"' be added to the PartnerIdentityProvider element to support signed SAML requests?

A. PVWAConfig.xml

B. saml.config

C. PVConfiguration.xml

D. samlconfig.ini

정답: A

문제8

The connect button requires PSM to work.

A. FALSE

B. TRUE

정답: A

문제9

As a member of a PAM Level-2 support team, you are troubleshooting an issue related to load balancing four PVWA servers at two data centers. You received a note from your Level-1 support team stating "When testing PVWA website from a workstation, we noticed that the "Source IP of last sign-in" was shown as the VIP (Virtual IP address) assigned to the four PVWA servers instead of the workstation IP where the PVWA site was launched from." Which step should you take?

A. Verify the "LoadBalancerClientAddressHeader" parameter setting in PVWA configuration file Web.config is set to "X-Forwarded-For".

B. Edit the dbparm.ini file on the Vault server and add the IP or subnet of the workstation to the whitelist.

C. Add the VIP (Virtual IP address) assigned to the four PVWA servers to the certificates issued for all four PVWA servers, if missing.

D. Add a firewall rule to allow the testing workstation to connect to the VIP (Virtual IP address) assigned to the four PVWA servers on Port TCP 443.

정답: A

문제10

At what point is a transparent user provisioned in the vault?

A. During the vault's nightly LD|^P refresh

B. When a vault admin runs LDAP configuration wizard.

C. When a directory mapping matching that user id is created.

D. The first time the user logs in.

정답: C

최신 PAM-SEN 무료덤프 - CyberArk Sentry - PAM

우리와 연락하기

유용한 링크

최신 업데이트