[Jan 28, 2024] Pass CyberArk Sentry PAM-SEN Exam With 138 Questions [Q26-Q49]

QUESTION 26
Which service must be set to Automatic (delayed start) after the Vault is installed and configured?

QUESTION 27
What is a prerequisite step before CyberArk can be configured to support RADIUS authentication?

QUESTION 28
The Remote Desktop Services role must be property licensed by Microsoft.

QUESTION 29
Which parameter must be provided when registering a primary Vault in Azure, but not in Amazon Web Services?

QUESTION 30
The PrivateArk clients allows a user to view the contents of the vault like a filesystem.

QUESTION 31
CyberArk User Neil is trying to connect to the Target Linux server 192.168.1.164 using a domain account ACME/linuxuser01 on domain acme.corp using PSM for SSH server 192.168.65.145.
What is the correct syntax?

QUESTION 32
If a customer has one data center and requires fault tolerance, how many PVWAs should be deployed?

QUESTION 33
The Remote Desktop Services role must be properly licensed by Microsoft.

QUESTION 34
At what point is a transparent user provisioned in the vault?

QUESTION 35
What is the purpose of the CPM_Preinstallation.ps1 script included with the CPM installation package?

QUESTION 36
When integrating a Vault with HSM, which file is uploaded to the HSM device?

QUESTION 37
A customer has two data centers and requires a single PVWA url.
Which deployment provides the fastest time to reach the PVWA and the most redundancy?

QUESTION 38
How should you configure PSM for SSH to support load balancing?

QUESTION 39
Your customer upgraded recently to version 12.2 to allow the Linux team to use the new MFA caching feature. The PSM for SSH was installed with default configuration settings. After setting the Authentication to SSH key and enabling MFA Caching from the PVWA interface, the Linux Team cannot connect successfully using the new MFA caching feature.
What is the most probable cause?

QUESTION 40
A customer’s environment has three data centers consisting of 5,000 servers in Germany, 10,000 servers in Canada, and 1,500 servers in Singapore. You want to manage target servers and avoid complex firewall rules.
How many CPMs should you deploy?

QUESTION 41
A vault admin received an email notification that a password verification process has failed.
Which service sent the message?

QUESTION 42
Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

QUESTION 43
Does CyberArk need service accounts on each server to change passwords?

QUESTION 44
Your customer wants to store the Safes Data on Vault Drive D instead of Drive C.
Which file should you edit?

QUESTION 45
Which files does the Vault Installation Wizard prompt you for during the Vault install?

QUESTION 46
Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?

QUESTION 47
As a member of a PAM Level-2 support team, you are troubleshooting an issue related to load balancing four PVWA servers at two data centers. You received a note from your Level-1 support team stating “When testing PVWA website from a workstation, we noticed that the “Source IP of last sign-in” was shown as the VIP (Virtual IP address) assigned to the four PVWA servers instead of the workstation IP where the PVWA site was launched from.” Which step should you take?

QUESTION 48
What is the best practice for storing the Master CD?

QUESTION 49
What is the recommended method to determine if a PVWA is unavailable and should be disabled in a load balancing pool?