Free PAM-SEN Exam Braindumps

Pass your CyberArk Sentry PAM exam with these free Questions and Answers

Page 3 of 28
QUESTION 6

What is a prerequisite step before CyberArk can be configured to support RADIUS authentication?

  1. A. Log on to the PrivateArk Client, display the User properties of the user to configure, run the Authentication method drop-down list, and select RADIUS authentication.
  2. B. In the RADIUS server, define the CyberArk Vault as a RADIUS client/agen
  3. C. Most Voted
  4. D. In the Vault installation folder, run CAVaultManager as administrator with the SecureSecretFiles command.
  5. E. Navigate to /Server/Conf and open DBParm.ini and set the RadiusServersInfo parameter.

Correct Answer: B

QUESTION 7

A customer is moving from an on-premises to a public cloud deployment. What is the best and most cost-effective option to secure the server key?

  1. A. Install the Vault in the cloud the same way you would in an on-premises environmen
  2. B. Place the server key in a password protected folder on the operating system.
  3. C. Install the Vault in the cloud the same way you would in an on-premises environmen
  4. D. Purchase a Hardware Security Module to secure the server key.
  5. E. Install the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.
  6. F. Install the Vault using the native cloud images and secure the server key with a Hardware Security Module.

Correct Answer: C

QUESTION 8

For redundancy, you want to add a secondary RADIUS server. What must you do to accomplish this?

  1. A. Add to the application settings of the PVWA web.config file.
  2. B. In the PVWA vault.ini file, list each RADIUS server host address in the "Addresses" attribute separated by commas.
  3. C. Open the DBParm.ini on the Vault serve
  4. D. Add the second RADIUS server configuration settings after the first one, separated by a comm
  5. E. Most Voted
  6. F. In the PVWA web.config file, add the location element at the end of the config fil
  7. G. Set the path value to "Default Web Site/PasswordVault/api/auth/pkipn/logon".

Correct Answer: C

QUESTION 9

If a transparent user matches two different directory mappings, how does the system determine which user template to use?

  1. A. The system will use the template for the mapping listed first.
  2. B. The system will use the template for the mapping listed last.
  3. C. The system will grant all of the vault authorizations from the two templates.
  4. D. The system will grant only the vault authorizations that are listed in both templates

Correct Answer: A

QUESTION 10

You are setting up a Linux host to act as an HTML 5 gateway for PSM sessions.
Which servers need to be trusted by the Linux host to secure communications through the gateway?

  1. A. PSM and PVWA
  2. B. PSM and CPM
  3. C. PVWA and Vault
  4. D. Vault and PSM

Correct Answer: A

Page 3 of 28

Post your Comments and Discuss CyberArk PAM-SEN exam with other Community members: