[May-2024] PAM-SEN Certification with Actual Questions from ExamPrepAway
Updated PAM-SEN Dumps PDF - PAM-SEN Real Valid Brain Dumps With 138 Questions!
NEW QUESTION # 72
The account used to install a PVWA must have ownership of which safes? (Choose two.)
- A. VaultInternal
- B. PVWAReports
- C. System
- D. Notification Engine
- E. PVWAConfig
Answer: A,D
NEW QUESTION # 73
When integrating a Vault with HSM, which file is uploaded to the HSM device?
- A. recprv.key
- B. mdbase.dat
- C. server.key
- D. recpub.key
Answer: C
NEW QUESTION # 74
In addition to disabling Windows services or features not needed for PVWA operations, which tasks does PVWA_Hardening.ps1 perform when run? (Choose two.)
- A. renames the local Administrator Account
- B. performs IIS hardening
- C. configures all group policy settings
- D. imports the CyberArk INF configuration
- E. configures Windows Firewall
Answer: B,E
NEW QUESTION # 75
A customer is moving from an on-premises to a public cloud deployment.
What is the best and most cost-effective option to secure the server key?
- A. Install the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.
- B. Install the Vault using the native cloud images and secure the server key with a Hardware Security Module.
- C. Install the Vault in the cloud the same way you would in an on-premises environment. Purchase a Hardware Security Module to secure the server key.
- D. Install the Vault in the cloud the same way you would in an on-premises environment. Place the server key in a password protected folder on the operating system.
Answer: A
NEW QUESTION # 76
Which parameter must be provided when registering a primary Vault in Azure, but not in Amazon Web Services?
- A. /RecPub
- B. /MasterPass
- C. /RDPGateway
- D. /AdminPass
Answer: C
NEW QUESTION # 77
The vault server uses a modified version of the Microsoft Windows firewall.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION # 78
What is the purpose of the CPM_Preinstallation.ps1 script included with the CPM installation package?
- A. It automatically installs the CPM, requiring no additional user input.
- B. It allows you to install the CPM using a command line approach rather than using the installation wizard.
- C. It verifies the NET version installed on the server and sets the IIS SSL TLS server configuration.
- D. It prompts for input parameters that will be used to pre-populate form fields in the installation wizard.
Answer: C
NEW QUESTION # 79
A customer's environment has three data centers consisting of 5,000 servers in Germany, 10,000 servers in Canada, and 1,500 servers in Singapore. You want to manage target servers and avoid complex firewall rules.
How many CPMs should you deploy?
- A. 6 total, 2 per data center
- B. 0
- C. 3 total, 1 per data center
- D. 1
Answer: C
NEW QUESTION # 80
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply
- A. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.
- B. Store the server key in a Hardware Security Module.
- C. Copy the contents of the CD to the System Safe on the vault
- D. Store the CD in a physical safe and mount the CD every time vault maintenance is performed.
- E. Store the server key in the Provider cache
Answer: A,B
NEW QUESTION # 81
Which configuration file and Vault utility are used to migrate the server key to an HSM?
- A. DBparm.ini and CAVaultManager.exe
- B. VaultKeys.ini and ChangeServerKeys.exe
- C. DBparm.ini and ChangeServerKeys.exe
- D. VaultKeys.ini and CAVaultManager.exe
Answer: B
NEW QUESTION # 82
A customer wants to store PSM recordings for 100 days and estimates they will have 10 Windows sessions per day for 100 minutes each.
What is the minimum storage required for the Vault and PAReplicate for the PSM recordings?
- A. 250 GB
- B. 25 GB Most Voted
- C. 500 GB
- D. 5 GB
Answer: A
NEW QUESTION # 83
Which of the correct order of installation for PAS components?
- A. Vault, CPM, PSM, PVWA
- B. CPM, Vault, PSM, PVWA
- C. Vault, CPM, PVWA, PSM
- D. PVWA, Vault, CPM, PSM
Answer: C
NEW QUESTION # 84
You are installing PSM for SSH with AD-Bridge and CyberArkSSHD mode set to integrated for your customer.
Which additional packages do you need to install to meet the customer's needs? (Choose two.)
- A. CARKpsmp-SSHD
- B. OpenSSH 7.8 or higher
- C. libssh
- D. CARKpsmp-ADBridge
- E. CARKpsmp-infra
Answer: C,E
NEW QUESTION # 85
Which of the following protocols need to be installed on a standalone vault server? Check all that apply.
- A. Client for Microsoft Networks
- B. File and Printer Sharing for Microsoft Networks
- C. QoS Packet Scheduler
- D. Internet Protocol version 4 (TCP/IPv4)
- E. NIC Teaming Driver, if applicable
Answer: A,B,C,D
NEW QUESTION # 86
You are successfully managing passwords in the alpha cyberark com domain; however, when you attempt to manage a password in the beta cyberark com domain, you receive the 'network path not found' error. What should you check first?
- A. That an appropriate trust relationship exists between alpha.cyberark com and beta cyberark.com
- B. That the end user has the correct permissions on the safe.
- C. That the CPM can successfully resolve addresses in the beta cyberark com domain
- D. That the username and password are correct
Answer: C
NEW QUESTION # 87
Which file must you edit to ensure the PSM for SSH server is not hardened automatically after installation?
- A. psmpparms
- B. psmgw.config
- C. vault.ini
- D. user.cred
Answer: A
NEW QUESTION # 88
What must you do to synchronize a new Vault server with an organization's NTP server?
- A. Configure an AllowNonStandardFWAddresses rule for the organization's NTP server in DBParm.ini on the Vault server.
- B. Update the AutoSyncExternalObjects configuration in DBParm.ini on the Vault server to schedule regular synchronization.
- C. Ensure the organization's NTP server is installed in the same location as the Vault server requiring synchronization.
- D. Use the Windows Firewall console to configure a rule on the Vault server which allows communication with the organization's NTP server.
Answer: A
NEW QUESTION # 89
......
Pass Your PAM-SEN Exam Easily With 100% Exam Passing Guarantee: https://ucertify.examprepaway.com/CyberArk/braindumps.PAM-SEN.ete.file.html