Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Discussions
  1. Home
  2. CyberArk
  3. Sentry
  4. PAM-SEN
  5. CyberArk Sentry PAM Questions and Answers

Pass the CyberArk Sentry PAM-SEN Questions and answers with ValidTests

Exam PAM-SEN All Questions
Exam PAM-SEN Premium Access

View all detail and faqs for the PAM-SEN exam

Go to Exam
Viewing page 4 out of 4 pages
Viewing questions 31-40 out of questions
Questions # 31:

You are installing the HTML5 gateway on a Linux host using the RPM provided.

After installing the Tomcat webapp, what is the next step in the installation process?

Options:

A.

Deploy the HTML5 service (guacd). Most Voted

B.

Secure the connection between the guacd and the webapp.

C.

Secure the webapp and JWT validation endpoint.

D.

Configure ASLR.

Expert Solution
Questions # 32:

What is required before the first CPM can be installed?

Options:

A.

The environment must have at least one Vault and one PVWA installed.

B.

The Vault environment must have at least one account stored in a safe.

C.

Custom platforms must be downloaded from the CyberArk Marketplace.

D.

The PSM component must be installed and proper functionality validated.

Expert Solution
Questions # 33:

Which file would you modify to configure the vault to send SNMP traps to your monitoring solution?

Options:

A.

dbparm ini

B.

paragent.ini

C.

ENEConf.ini I

D.

padr ini

Expert Solution
Questions # 34:

The account used to install a PVWA must have ownership of which safes? (Choose two.)

Options:

A.

VaultInternal

B.

PVWAConfig

C.

System

D.

Notification Engine

E.

PVWAReports

Expert Solution
Questions # 35:

HTML5 Gateway can be installed on which supported UNIX OS versions? (Choose two.)

Options:

A.

Red Hat Enterprise Linux 7.x

B.

CentOS 7.x

C.

Ubuntu 20.x

D.

AK 7.x

E.

Android 11.x

Expert Solution
Questions # 36:

Which file must you edit to ensure the PSM for SSH server is not hardened automatically after installation?

Options:

A.

vault.ini

B.

user.cred

C.

psmpparms

D.

psmgw.config

Expert Solution
Questions # 37:

-

The installCyberArkSSHD parameter on the PSM for SSH can be set to multiple values.

Match each value to the correct condition.

Question # 37

Options:

Expert Solution
Questions # 38:

Which components can connect to a satellite Vault in a distributed Vault architecture?

Options:

A.

CPM, EPM, PTA

B.

PVWA, PSM

C.

CPM, PVWA, PSM

D.

CPM, PSM

Expert Solution
Questions # 39:

As a member of a PAM Level-2 support team, you are troubleshooting an issue related to load balancing four PVWA servers at two data centers. You received a note from your Level-1 support team stating “When testing PVWA website from a workstation, we noticed that the “Source IP of last sign-in” was shown as the VIP (Virtual IP address) assigned to the four PVWA servers instead of the workstation IP where the PVWA site was launched from.”

Which step should you take?

Options:

A.

Verify the “LoadBalancerClientAddressHeader” parameter setting in PVWA configuration file Web.config is set to “X-Forwarded-For”.

B.

Add the VIP (Virtual IP address) assigned to the four PVWA servers to the certificates issued for all four PVWA servers, if missing.

C.

Add a firewall rule to allow the testing workstation to connect to the VIP (Virtual IP address) assigned to the four PVWA servers on Port TCP 443.

D.

Edit the dbparm.ini file on the Vault server and add the IP or subnet of the workstation to the whitelist.

Expert Solution
Questions # 40:

A customer is moving from an on-premises to a public cloud deployment.

What is the best and most cost-effective option to secure the server key?

Options:

A.

Install the Vault in the cloud the same way you would in an on-premises environment. Place the server key in a password protected folder on the operating system.

B.

Install the Vault in the cloud the same way you would in an on-premises environment. Purchase a Hardware Security Module to secure the server key.

C.

Install the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.

D.

Install the Vault using the native cloud images and secure the server key with a Hardware Security Module.

Expert Solution
Viewing page 4 out of 4 pages
Viewing questions 31-40 out of questions