CyberArk CyberArk Certifications PAM-SEN Questions & Answers

• Question 11:

  Which of the following are prerequisites for installing PVWA Check all that Apply.

  A. Web Services Role

  B. NET 4.5.1 Framework Feature

  C. Remote Desktop Services Role

  D. Windows BitLocker

  Correct Answer: B

• Question 12:

  Which file would you modify to configure the vault to send SNMP traps to your monitoring solution?

  A. dbparm ini

  B. paragent.ini

  C. ENEConf.ini I

  D. padr ini

  Correct Answer: A

• Question 13:

  The Remote Desktop Services role must be property licensed by Microsoft.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 14:

  By default, the vault secure protocol uses which IP port and protocol.

  A. TCP/1858

  B. TCP/443

  C. UDP/1858

  D. TCP/80

  Correct Answer: B

• Question 15:

  In order to retrieve data from the vault a user MUST use an interface provided by CyberArk.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 16:

  To apply a new license file you must:

  A. Upload the license.xml file to the System Safe

  B. Upload the license.xml file to the Vaultlnternal Safe.

  C. Upload the license.xml file to the System Safe and restart the PrivateArk Server service.

  D. Upload the license.xml file to the Vaultlnternal Safe and restart the PrivateArk Server service.

  Correct Answer: D

• Question 17:

  Does CyberArk need service accounts on each server to change passwords?

  A. Yes. it requires a domain administrator account to change any password on any server.

  B. Yes. it requires a local administrator account on any Windows server and a root level account on any Unix server.

  C. No. passwords are changed by the Password Provider Agent.

  D. No. the CPM uses the account information stored in the vault to login and change the account's password using its own credentials

  Correct Answer: B

• Question 18:

  What is the purpose of the password Reconcile process?

  A. To test that CyberArk is storing accurate credentials for accounts.

  B. To change the password of an account according to organizationally defined password rules

  C. To allow CyberArk to manage unknown or lost credentials.

  D. To generate a new complex password.

  Correct Answer: A

• Question 19:

  Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

  A. Server Key

  B. Recovery Public Key

  C. Recovery Private Key

  D. Safe Key

  Correct Answer: C

• Question 20:

  Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply

  A. Store the CD in a physical safe and mount the CD every time vault maintenance is performed.

  B. Copy the contents of the CD to the System Safe on the vault

  C. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.

  D. Store the server key in a Hardware Security Module.

  E. Store the server key in the Provider cache

  Correct Answer: E