PAM-SEN CyberArk Sentry PAM Online Dumps (Former Code is CAU301)

dumps2023-08-09T10:11:15+08:00

To take PAM-SEN CyberArk Sentry PAM exam, you need to earn PAM-DEF CyberArk Defender PAM (the former code is CAU201) first. Studying PAM-SEN CyberArk Sentry exam information is the first step for you to take. There are 60 multiple-choice questions in the real CyberArk PAM-DEF exam, and you have 90 minutes to answer all the questions. The exam price is $200. Our new cracked PAM-SEN CyberArk Sentry PAM online dumps can guarantee you success. Free online CyberArk Certification PAM-SEN exam dumps are below.

Page 1 of 3

1. You are installing a CPM.

In addition to Add Safes, Add/Update Users, Reset Users’ Passwords and Manage Server File Categories, which Vault authorization(s) does a CyberArk user need to install the CPM?

Manage Directory Mapping

Activate Users

Backup All Safes, Restore All Safes

Audit Users, Add Network Areas

2. In which configuration file do you add LoadBalancerClientAddressHeader when you enable x-forwarding on the PVWA loadbalancer?

PVconfiguration.xml

web.config

apigw.ini

CyberArkScheduledTasks.exe.config

3. You are configuring SNMP remote monitoring for your organization’s Vault servers.

In the PARAgent.ini, which parameter specifies the destination of the Vault SNMP traps?

SNMPHostIP

SNMPTrapPort

SNMPCommunity

SNMPVersion

4. You want to improve performance on the CPM by restricting accounts for the CYBRWINDAD platform to only the WINDEMEA and WINDEMEA_Admin safes.

How do you set this in CyberArk?

In the CYBRWINDAD platform, under Automatic Password Management/General, configure AllowedSafes and set to (WINDEMEA)|(WINDEMEA_ADMIN).

In the settings for Configuration/CPM assigned to the WINDEMEA and WINDEMEAADMIN safes, configure AllowedSafes and set to (WINDEMEA)|(WINDEMEAADMIN).

In the CYBRWINDAD platform, under UI&Workflows/Properties/Optional, configure AllowedSafes and set to (WINDEMEA)|(WINDEMEA_ADMIN).

Modify cpm.ini on the relevant CPM/s and add the setting AllowedSafesCYBRWINDAD and set to (WINDEMEA)|(WINDEMEAADMIN).

5. Before the hardening process, your customer identified a PSM Universal Connector executable that will be required to run on the PSM.

Which file should you update to allow this to run?

PSMConfigureAppLocker.xml

PSMHardening.xml

PSMAppConfig.xml

PSMConfigureHardening.xml

6. How should you configure PSM for SSH to support load balancing?

by using a network load balancer

in PVWA > Options > PSM for SSH Proxy > Servers

in PVWA > Options > PSM for SSH Proxy > Servers > VIP

by editing sshd.config on the all the PSM for SSH servers

7. In which configuration file on the Vault can filters be configured to either include or exclude log messages that are sent through SNMP?

PARAgent.ini

DBParm.ini

TSParm.ini

CyberArkv2 MIB file

8. A first PSM server has been installed.

What should you confirm before installing any additional PSM servers?

The PSM ID of the first installed PSM server was changed and the additional PSM server can use the same PSM I

The user performing the installation is a direct owner in the PSMUnmanagedSessionAccounts Safe, PSM safe and member of PVWAMonitor group.

The user performing the installation is not a direct owner in the PSMUnmanagedSessionAccounts Safe.

The path of the Recordings Folder must be different on all PSM installations.

9. During the PSM installation process, Safes and a User are created.

In addition to Add Safes, Add/Update Users, Reset Users’ Passwords, and Activate Users, which authorization(s) does the Vault user installing the PSM need to enable them to be successfully created?

Manage Vault File Categories

Manage Server File Categories

Manage Directory Mapping, Manage Server File Categories

Manage Directory Mapping, Manage Vault File Categories

10. Your customer wants to store the Safes Data on Vault Drive D instead of Drive C.

Which file should you edit?

TSparm.ini

Vault.ini

DBparm.ini

user.ini

Page 2 of 3

11. What must you do to prepare a Windows server for PVWA installation?

In the InstallationAutomation folder, run the PVWA_Prerequisites.ps1 file as an administrator in Powershell.

Install the PrivateArk client.

Verify the user performing the installation is Domain Administrator and has logon access to the Vault server.

Enable IPv6.

12. Which statement about REST API is correct? (Choose two.)

When a user successfully authenticates to the Vault, an authentication token is returned.

REST API Windows authentication method allows skipping the logon API by using the Windows default credentials with a Kerberos ticket.

To allow High Availability, REST API can be configured to support Session Load Balancing by editing the PVConfiguration.xml and setting the AllowPVWASessionRedandancy=Yes.

Each REST API call requires that a valid authentication token be provided.

REST calls are directly sent to the currently active Vault using Port 1858.

13. HTML5 Gateway can be installed on which supported UNIX OS versions? (Choose two.)

Red Hat Enterprise Linux 7.x

CentOS 7.x

Ubuntu 20.x

AK 7.x

Android 11.x

14. Which utility should be used to register the Vault in Amazon Web Services?

CAVaultManager

StorageManager

CloudVaultManager

CACert

15. You are configuring the Vault to send syslog audit data to your organization’s SIEM solution.

What is a valid value for the SyslogServerProtocol parameter in DBPARM.INI file?

TLS

SSH

SMTP

SNMP

16. When creating a distributed Vault environment architecture, what is the maximum number of Vault servers that can be deployed?

5 - number of primary and satellite Vaults can be specified during installation

3 - all primary

6 - 1 primary and 5 satellite

10 - 2 primary and 8 satellite

17. DRAG DROP -

Arrange the steps to complete CPM Hardening for Out-of-Domain Deployment in the correct sequence.

18. To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

Add the FQDN & IP details for each LDAP host into the local hosts file of the Vault server.

Configure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.

Ensure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.

Set the ReferralsDNSLookup parameter value to “No” in the directory configuration.

19. In which file must the attribute ‘SignAuthnRequest=”true”’ be added to the PartnerIdentityProvider element to support signed SAML requests?

saml.config

samlconfig.ini

PVWAConfig.xml

PVConfiguration.xml

20. A customer is moving from an on-premises to a public cloud deployment.

What is the best and most cost-effective option to secure the server key?

Install the Vault in the cloud the same way you would in an on-premises environment. Place the server key in a password protected folder on the operating system.

Install the Vault in the cloud the same way you would in an on-premises environment. Purchase a Hardware Security Module to secure the server key.

Install the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.

Install the Vault using the native cloud images and secure the server key with a Hardware Security Module.

Page 3 of 3

21. Your customer upgraded recently to version 12.2 to allow the Linux team to use the new MFA caching feature. The PSM for SSH was installed with default configuration settings. After setting the Authentication to SSH key and enabling MFA Caching from the PVWA interface, the Linux Team cannot connect successfully using the new MFA caching feature.

What is the most probable cause?

OpenSSH 7.8 or above is not installed.

The MFACaching parameter in the psmpparms file is not set to True.

A passphrase policy must be added.

MFA caching is not supported when the PSM for SSH is deployed with default settings.

22. Which service must be set to Automatic (delayed start) after the Vault is installed and configured?

Windows Time service

PrivateArk Database

Windows Update service

PrivateArk Server

23. You want to add an additional maintenance user on the PSM for SSH.

How can you accomplish this if InstallCyberarkSSHD is set to Yes or No?

Create a local user and add it to the PSMMaintenance Group.

Create a local user called proxymng<number>.

Create a local user and add it to group configured for the parameter AllowGroups in the /etc/sshd_config file.

Create a local user, called psmpmng<number>.

24. Which SMTP address can be set on the Notification Settings page to re-invoke the ENE setup wizard after the initial Vault installation?

255.255.255.255

8.8.8.8

192.168.1.1

1.1.1.1

25. CyberArk User Neil is trying to connect to the Target Linux server 192.168.1.164 using a domain account ACME/linuxuser01 on domain acme.corp using PSM for SSH server 192.168.65.145.

What is the correct syntax?

ssh neil@linuxuser01:[email protected]@192.168.65.145

ssh neil@linuxuser01#[email protected]@192.168.65.145

ssh neil@[email protected]@192.168.65.145

ssh neil@[email protected]@[email protected]

26. In addition to bit rate and estimated total duration of recordings per day, what is needed to determine the amount of storage required for PSM recordings?

retention period

number of PSMs

number of users

number of targets

27. Which components can connect to a satellite Vault in a distributed Vault architecture?

CPM, EPM, PTA

PVWA, PSM

CPM, PVWA, PSM

CPM, PSM

28. You are installing PSM for SSH with AD-Bridge and CyberArkSSHD mode set to integrated for your customer.

Which additional packages do you need to install to meet the customer’s needs? (Choose two.)

CARKpsmp-infra

libssh

OpenSSH 7.8 or higher

CARKpsmp-ADBridge

CARKpsmp-SSHD

29. Which component should be installed on the Vault if Distributed Vaults are used with PSM?

RabbitMQ

Disaster Recovery

Remote Control Client

Distributed Vault Server

30. What is the default username for the PSM for SSH maintenance user when InstallCyberarkSSHD is set to yes?

proxymng

psmp_maintenance

psmpmaintenanceuser

psmpmnguser

PAM-SEN CyberArk Sentry PAM Online Dumps (Former Code is CAU301)

PAM-SEN CyberArk Sentry PAM Online Dumps (Former Code is CAU301)

Share this post

Leave a Reply Cancel reply

Related Posts