最新的CyberArk Certification認證 PAM-DEF-SEN考試題庫

問題1

Which is the purpose of the HeadStartInterval setting in a platform?

A. It alerts users of upcoming password changes a certain number of days before expiration.

B. It determines how far in advance audit data is collected for reports.

C. It instructs the AIM provider to 'skip the cache' during the defined time period.

D. It instructs the CPM to initiate the password change process certain number of days before expiration.

正確答案: D

問題2

Which of the following are secure options for storing the contents of the Operator CD. while still allowing the contents to be accessible upon a planned Vault restart? Choose alt that apply

A. Store the server key in the Provider cache

B. Store the CD in a physical safe and mount the CD every time vault maintenance is performed.

C. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.

D. Store the server key in a Hardware Security Module.

E. Copy the contents of the CD to the System Safe on the vault

正確答案: B,C,D

問題3

Which is the correct order of installation for PAS components?

A. Vault. CPM. PVWA. PSM

B. PVWA, Vault, CPM. PSM

C. CPM, Vault. PSM. PVWA

D. Vault, CPM. PSM, PVWA

正確答案: A

問題4

What is the purpose of the password Reconcile process?

A. To generate a new complex password.

B. To test that CyberArk is storing accurate credentials for accounts.

C. To allow CyberArk to manage unknown or lost credentials.

D. To change the password of an account according to organizationally defined password rules.

正確答案: B

問題5

When the PSM Gateway (also known as the HTML5 Gateway) is implemented, users must have an RDP client, such as MSTSC, installed on their endpoint in order to launch connections via the PSM.

A. True

B. False. When the PSM Gateway is implemented, the user only requires a browser in order launch a connection via the PSM.

正確答案: A

問題6

When accessing the Vault via PVWA, is it possible, is it possible to configure multiple Dual Authentication Methods?

A. Yes, all authentication methods will be configured to use the IIS integrated authentication flow.

B. Yes, authentication methods will be configured to use the combination of IIS and Vault integrated authentication flow.

C. No, dual authentication methods are not supported.

D. Yes, all authentication methods will be configured to use the Vault integrated authentication flow.

正確答案: B

問題7

To support a fault tolerant and high-availability architecture, the Password Vault Web Access (PVWA) servers need to be configured to communicate with the Primary Vault and Satellite Vaults.
What file needs to be changed on the PVWA to enable this setup?

A. Satellite.ini

B. pvwa.ini

C. dbparm.ini

D. Vault.ini

正確答案: D

問題8

Users complain they are unsuccessful attempting to authenticate to the PVWA web site. After entering their credentials, they receive a "Timeout has expired". You test the URL using multiple browsers and receive the same error. The CyberArk.WebApplication.log shows the "ITACM012S Timeout has expired" log entry.
What is the next troubleshooting step you should take?

A. Check the health of the Vault Server and ensure all services are running

B. Check the CyberArk.WebConsole.log for errors

C. Run an IISRESET on the PVWA server

D. Check network firewall rules to ensure the PVWA can communicate to the Vault over tcp_1858

正確答案: D

問題9

The Vault can only integrate with a single Security Information and Event Management (SIEM) or SYSLOG server.

A. False

B. True

正確答案: A

問題10

Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests?

A. The CPM does not change the password under this circumstance

B. HeadStartInterval

C. ImmediateInterval

D. Interval

正確答案: C

問題11

PSM captures a record of each command that was issues in SQL Plus.

A. TRUE

B. FALSE

正確答案: A

問題12

A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings.
What is the issue?

A. The user is not a member of the Auditors group.

B. The user must login as PSMAdminConnect.

C. The PSM service is not running.

D. The user is not a member of the PVWAMonitor group.

正確答案: A

問題13

PSM requires the Remote Desktop Session Host role service.

A. TRUE

B. FALSE

正確答案: A

問題14

When planning to load balance at least 2 PSM Servers in an "in-domain" deployment, is it required to move the PSMConnect and PSMAdminConnect users to the domain level?

A. Yes, both PSMConnect and PSMAdminConnect users should be moved to the domain

B. No. both accounts must be left as local accounts.

C. Yes. but only the PSMConnect user must be moved to the domain.

D. No. this is the customers decision and will work with local or domain based users.

最新的CyberArk Defender - PAM & Sentry - PAM - PAM-DEF-SEN免費考試真題

最新更新

站內鏈接

聯系我們