PAM-SEN Exam Dumps - CyberArk Sentry PAM

Go to page:

Question # 25

You are beginning the post-install process after a manual PSM installation is completed.

What must you do?

Disable screen saver for the PSM local users.

Create a new group called PSMShadowUsers.

Reset the PSMAdminConnect user password.

Enable load balancing on the PSM server.

Full Access

Question # 26

Which of the following are supported authentication methods for CyberArk? Check all that apply

CyberArk Password (SRP)

LDAP

SAML

PKI

RADIUS

OracleSSO

Biometric

Full Access

Question # 27

CyberArk User Neil is trying to connect to the Target Linux server 192.168.1.164 using a domain account ACME/linuxuser01 on domain acme.corp using PSM for SSH server 192.168.65.145.

What is the correct syntax?

ssh neil@linuxuser01:acme.corp@192.168.1.164@192.168.65.145

ssh neil@linuxuser01#acme.corp@192.168.1.164@192.168.65.145 Most Voted

ssh neil@linuxuser01@192.168.1.164@192.168.65.145

ssh neil@linuxuser01@acme.corp@192.168.1.164@192.168.65.145

Full Access

Question # 28

Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply

Store the CD in a physical safe and mount the CD every time vault maintenance is performed.

Copy the contents of the CD to the System Safe on the vault

Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.

Store the server key in a Hardware Security Module.

Store the server key in the Provider cache

Full Access

Question # 29

By default, the vault secure protocol uses which IP port and protocol.

TCP/1858

TCP/443

UDP/1858

TCP/80

Full Access

Question # 30

In which file must the attribute â€˜SignAuthnRequest=â€trueâ€â€™ be added to the PartnerIdentityProvider element to support signed SAML requests?

saml.config

samlconfig.ini

PVWAConfig.xml

PVConfiguration.xml

Full Access

Question # 31

Which SMTP address can be set on the Notification Settings page to re-invoke the ENE setup wizard after the initial Vault installation?

255.255.255.255

8.8.8.8

192.168.1.1

1.1.1.1

Full Access

Question # 32

As a member of a PAM Level-2 support team, you are troubleshooting an issue related to load balancing four PVWA servers at two data centers. You received a note from your Level-1 support team stating â€œWhen testing PVWA website from a workstation, we noticed that the â€œSource IP of last sign-inâ€ was shown as the VIP (Virtual IP address) assigned to the four PVWA servers instead of the workstation IP where the PVWA site was launched from.â€

Which step should you take?

Verify the â€œLoadBalancerClientAddressHeaderâ€ parameter setting in PVWA configuration file Web.config is set to â€œX-Forwarded-Forâ€.

Add the VIP (Virtual IP address) assigned to the four PVWA servers to the certificates issued for all four PVWA servers, if missing.

Add a firewall rule to allow the testing workstation to connect to the VIP (Virtual IP address) assigned to the four PVWA servers on Port TCP 443.

Edit the dbparm.ini file on the Vault server and add the IP or subnet of the workstation to the whitelist.

Full Access

Go to page: