Try Free CyberArk PAM-DEF-SEN Exam Questions With Verified Answers

test2022-05-06T06:30:47+00:00

By test Defender – PAM, PAM-DEF-SEN Exam Questions, Sentry – PAM 0 Comments

How to prepare for PAM-DEF-SEN CyberArk Defender – PAM & Sentry – PAM exam? It is crucial to get the real PAM-DEF-SEN questions and answers before attending actual exam. Real PAM-DEF-SEN questions and answers are quite fantastic to prepare for the reason that it is with all the most current versions and around the correct PAM-DEF-SEN exam questions so, all of your specifications may be accomplished.

Now is a great time to take a free PAM-DEF-SEN practice test to see how well you know yourself!

Page 1 of 6

1. During LDAP/S integration you should specify the Fully Qualified Domain Name (FQDN) of the Domain Controller

TRUE

FALSE

2. In an SIEM integration it is recommended to use the fully-qualified domain name (FGDN) when specifying the SIEM server address(es).

TRUE

FALSE

3. Which file is used to configure new firewall rules on the Vault?

firewall.ini

PARagent.ini

dbparm.ini

padr.ini

4. The Vault server requires WINS services to work properly.

True

False

5. Which file is used to integrate the Vault with your Radius server?

radius.ini

paragent ini

ENEConf.ini

dbparm.ini

6. What is the purpose of the PrivateArk Database service?

Maintains Vault metadata.

Communicates with components.

Sends email alerts from the vault I

Executes password changes

7. It is impossible to override Master Policy settings for a Platform

TRUE

FALSE

8. Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

Password change

Password reconciliation

Session suspension

Session termination

9. When the PSM Gateway (also known as the HTML5 ( End Point in order to launch connections via the PSM

True

False, when the PSM Gateway is implemented, the user only requires a browser in order launch a connection via the PSM

10. Which utilities could you use to change debugging levels on the vault without having to restart the vault Select all that apply.

PAR Agent

PrivateArk Server Central Administration

Edit DBParm.ini in a text editor.

Setup exe

Page 2 of 6

11. Select the best practice for storing the Master CD.

Copy the files to the Vault server and discard the C

Copy the contents of the CD to a Hardware Security Module and discard the C

Store the CD in a secure location, such as a physical safe.

Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions) on the vault.

12. Any user can monitor live sessions in real time when users initiate RDP connection via Secure Connect through PSM?

TRUE

FALSE

13. The System safe allows access to the Vault configuration files.

TRUE

FALSE

14. Which of the following PTA detections are included in the Core PAS offering? (Choose all that apply.)

Suspected Credential Theft

Over-Pass-The-Hash

Golden Ticket

Unmanaged Privileged Access

15. Which user(s) can access all passwords in the vault

Administrator

Any member of Vault Admins

Any member of Auditors

Master

16. The vault does not support Role Based Access Control

TRUE

FALSE

17. An SMTP integration allows you to forward audit records from the vault to the SIEM.

TRUE

FALSE

18. Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the target email server during Simple Mail Transfer Protocol (SMTP) integration?

PVWA > Platform Management > Notification Settings

PVWA > Options > Notification Settings

PVWA > Administration > Notification Settings

PVWA > LDAP Integration > Notification Settings

19. Which IP port and Protocol are used by the CyberArk Secure Proprietary Protocol?

TCP/1858

TCP/636

UDP/1812

TCP/22

20. An auditor initiates a LIVE monitoring session to PSM server to view an ongoing LIVE session.

When the auditor’s machine makes an RDP connection the PSM server, which user will be used?

PSMAdminConnect

Shadowuser

PSMConnect

Credentials Stored in the Vault for the Target Machine

Page 3 of 6

21. If a transparent user belongs two different directory mappings, how does the system determine which user template to use?

The system will use the template for the mapping listed first.

The system will use the template for the mapping listed last.

The system will grant all of the vault authorizations from the two templates.

The system will grant only the vault authorizations that are listed in both templates.

22. What conditions must be met in order to log into the vault as the Master user? Select all that apply

Logon must be originated from the console of the Vault server or an EmergencyStation defined in DBParm.ini

User must provide the correct master password

Logon requires the Recovery Private Key to be accessible to the vault

Logon must satisfy a challange response request

23. When managing SSH keys. CPM automatically pushes the Private Key to all systems that use it

TRUE

FALSE

24. Ad-Hoc Access (formerly Secure Connect) provides the following features. (Choose all that apply.)

PSM connections to target devices that are not managed by CyberArk

Session Recording

Real-time live session monitoring

PSM connections from a terminal without the need to login to the PVWA

25. What is the purpose of the Allowed Safes parameter in a CPM policy? Select all that apply.

To improve performance by reducing CPU workload.

To prevent accidental use of a policy in the wrong safe.

To allow users to access only the passwords they should be able to access.

To enforce Least Privilege in CyberArk.

26. Which file is used to configure new firewall rules on the Vault?

firewall.ini

paragent.ini

dbparm.ini

padr.ini

27. A Reconcile Account can be specified in the Master Policy.

TRUE

FALSE

28. Which combination of safe member permissions will allow End Users to log in to a remote machine transparently but NOT show or copy the password?

Use Accounts, Retrieve Accounts, List Accounts

Use Accounts, List Accounts

Use Accounts

List Accounts, Retrieve Accounts

29. When creating an onboarding rule, it will be executed upon.

All accounts in the pending accounts list.

Any future accounts discovered by a discovery process.

All accounts in the pending accounts list and any future accounts discovered by a discovery process.

30. Which one of the built-in Vault users is not automatically added to the safe when it is first created in PVWA?

Master

Administrator

Auditor

Operator

Page 4 of 6

31. Which parameter controls how often the CPM looks for Exclusive Passwords that need to be changed?

HeadStartInterval

Interval

ImmediateInterval

The CPM does not change the password under this circumstance

32. The Vault administrator can change the Vault license by uploading the new license to the system Safe.

True

False

33. What is the primary purpose of One Time Passwords?

Reduced risk of credential theft

More frequent password changes

Non-repudiation (individual accountability)

To force a ‘collusion to commit’ fraud ensuring no single actor may use a password without authorization

34. Customers who have the 'Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

TRUE

FALSE

35. In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault.

True.

False. Because the user can also enter credentials manually using Ad-Hoc Access.

False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSMConnect.

False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

36. A safe was recently created by a user who is a member of the LDAP Vault Administrators group.

Which of the following users does not have access to the newly created safe by default?

Master

Administrator

Auditor

Backup

37. Which of the following sends out Simple Network Management Protocol (SNMP) traps?

PrivateArk Remote Control Agent

PrivateArk Server

CyberArk Event Notification Engine

CyberArk SNMP agent

38. tsparm.ini is the main configuration file for the vault.

TRUE

FALSE

39. A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings.

What is the issue?

The user must login as PSMAdminConnect.

The PSM service is not running.

The user is not a member of the PVWAMonitor group.

The user is not a member of the Auditors group.

40. PTA can automatically suspend sessions in case of suspicious activities detected in a privileged session, only if the session is made via the CyberArk PSM.

True

False, the PTA can suspend sessions whether the session is made via the PSM or not

Page 5 of 6

41. The vault supports a number of dual factor authentication methods.

TRUE

FALSE

42. Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?

dbparm.ini

PARagent.ini

ENEConf.ini

padre.ini

43. SAFE Authorizations may be granted to___________________. Select all that apply.

Vault Users

Vault Groups

LDAP Users

LDAP Groups

44. When a DR vault server becomes an active vault, it will automatically fail bacK to the original state once the primary vault comes back online.

True, this is the default behavior

False, this is not possible

True, if the 'AllowFailback' setting is set to yes in the PAD

ini file.

True, if the 'AllowFailback' setting is set to yes in the dbparm ini file.

45. One time passwords reduce the risk of Pass the Hash vulnerabilities in Windows

TRUE

FALSE

46. Where do you configure in PVWA the fully-qualified domain name (FQDN) of your target email server during SMTP integration?

PVWA > Platform Management > Notification Settings

PVWA > Options > Notification Settings

PVWA > Administration > Notification Settings

PVWA > LDAP Integartion > Notification Settings

47. What are the chief benefits of PSM? Choose all that apply

Privileged Session Isolation

Automatic Password Management

Privileged Session Recording

A & C

48. During the process of installing the CPM, you will be asked to provide the credentials for an administrate user in the Vault.

What are these credentials used for?

The credentials will be used later by the CPM to retrieve passwords from the Vault

The credentials are by the installer to register the CPM in the CyberArk database

The credentials are used by the installer to authenticate to the Vault and create the CPM environment (safes, users, etc.)

The credentials will be used later by the CPM to update passwords in the Vault

49. When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

True, this is the default behavior.

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the padr.ini file.

True, if the AllowFailback setting is set to “yes” in the padr.ini file.

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the dbparm.ini file.

50. Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

Server Key

Recovery Public Key

Recovery Private Key

Safe Key

Page 6 of 6

51. Which report shows the accounts that are accessible to each user?

Activity Report

Entitlement Report

Privileged Accounts Compliance Status Report

Applications Inventory Report

52. It is possible to restrict the time of day. or day of week that a verify process can occur

TRUE

FALSE

53. A Vault Administrator wants to change the PSM Server ID to comply with a naming standard

What is the process for changing the PSM Server ID?

First, logon to the PrivateArk Client as Administrator and open the PVWAConfig safe. Retrieve and edit the PVConfiguration.xml file. Search for the PSMServer Name and update the ID of the server you want to rename Save the file and copy back to the PVWAConfig safe. Restart the "CyberArk Privileged Session Manager" service on the PSM server.

then change the PSMServer ID in Administration. System Configuration. Options, Privileged Session Management. Configured PSM Servers Run an IISRESET on all PVWA servers.

First, login to the PVW

browse to Administration. System Configuration. Options. Pnvileged Session Management. Configured PSM Servers and select the PSM Server you need to change from the list of servers In the properties pane, set the value of the ID property to the new Server I

click Apply and O

Next, edit the basic_psm.ini file located on the PSM server in the PSM root directory and update the PSMServerlD parameter with the new Server I

save the file and restart the "CyberArk Privileged Session Manager" service on the PSM server

Options A and B above is the correct procedure

54. An Auditor needs to login to the PSM in order to live monitor an active session.

Which User ID is used to establish the RDP connection to the PSM server?

PSMConnect

PSMMaster

PSMGwUser

PSMAdminConnect

55. Which of these accounts onboarding methods is considered proactive?

Accounts Discovery

Detecting accounts with PTA

A Rest API integration with account provisioning software

A DNA scan

56. When using multiple Central Policy Managers (CPM), which one of the following Safes is shared by all CPMs?

PasswordManagerSharedSafe

PasswordManager_Pending

PasswordManager_workspace

PasswordManager_ADInternal

57. Which Built-in group grants access to the ADMINISTRATION page?

PVWAMonitor

PVWAUsers

Auditors

Vault Admins

58. PSM captures a record of each command that was executed in Unix.

TRUE

FALSE

59. What is the name of the Platform parameter that determines the amount of time a person is allowed to use a One Time Password?

MinValidityPeriod

Interval

ImmediateInterval

Timeout

60. Any user can monitor live sessions in real time when initiating RDP connection via Secure Connect through PSM.

True

False

Try Free CyberArk PAM-DEF-SEN Exam Questions With Verified Answers

Try Free CyberArk PAM-DEF-SEN Exam Questions With Verified Answers

Share this post

Author

Leave a Reply Cancel reply

Related Posts

Try Free CyberArk Defender PAM-DEF Exam Questions To Test Yourself