Download CyberArk PAM-DEF-SEN Mock Test Study Material [Q13-Q34] : Free valid test braindumps : http://free.validbraindumps.com

NO.13 Which is the purpose of the HeadStartInterval setting in a platform?

It determines how far in advance audit data is collected for reports.

It instructs the CPM to initiate the password change process certain number of days before expiration.

It instructs the AIM provider to ‘skip the cache’ during the defined time period.

It alerts users of upcoming password changes a certain number of days before expiration.

NO.14 CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

TRUE

FALSE

NO.15 The PSM Gateway (also known as the HTML5 Gateway) can be installed

True

False, the PSM Gateway must be installed on a separate Windows machine

NO.16 All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of OperationsManagers. The members of OperationsManagers never need to be able to use the show, copy or connect buttons themselves.
Which safe permissions do you need to grant to OperationsManagers? (Choose all that apply.)

Use Accounts

Retrieve Accounts

List Accounts

Authorize Password Requests

Access Safe without Authorization

NO.17 Which of the following options is not set in the Master Policy?

Password Expiration Date

Dual Control

Password Complexity

Require Access Reason

NO.18 When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

True, this is the default behavior.

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the padr.ini file.

True, if the AllowFailback setting is set to “yes” in the padr.ini file.

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the dbparm.ini file.

NO.19 The Vault needs to send SNMP traps to an SNMP solution. In which configuration file do you set the IP address of the SNMP solution?

PARAgent.ini

dbparm.ini

ENEConf.ini

my.ini

NO.20 An Auditor needs to login to the PSM in order to live monitor an active session.
Which User ID is used to establish the RDP connection to the PSM server?

PSMConnect

PSMMaster

PSMGwUser

PSMAdminConnect

NO.21 It is impossible to override Master Policy settings for a Platform

TRUE

FALSE

NO.22 To support a fault tolerant and high-availability architecture, the Password Vault Web Access (PVWA) servers need to be configured to communicate with the Primary Vault and Satellite Vaults.
What file needs to be changed on the PVWA to enable this setup?

Vault.ini

dbparm.ini

pvwa.ini

Satellite.ini

NO.23 What is the process to remove object level access control from a Safe?

Uncheck the ‘Enable Object Level Access Control’ on the Safe Details page in the PVWA.

Uncheck the ‘Enable Object Level Access Control’ box in the Safe Properties in PrivateArk.

This cannot be done.

Remove all ACLs from the Safe.

NO.24 An SMTP integration allows you to forward audit records from the vault to the SIEM.

TRUE

FALSE

NO.25 When planning to load balance at least 2 PSM Servers in an “in-domain” deployment, is it required to move the PSMConnect and PSMAdminConnect users to the domain level?

Yes. but only the PSMConnect user must be moved to the domain.

No. this is the customers decision and will work with local or domain based users.

Yes, both PSMConnect and PSMAdminConnect users should be moved to the domain

No. both accounts must be left as local accounts.

NO.26 What is the purpose of EVD?

To extract vault metadata into an open database platform.

To allow editing of vault metadata.

To create a backup of the MySQL database.

To extract audit data from the vault.

NO.27 Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

PSM (i.e., launching connections by clicking on the “Connect” button in the PVWA)

PSM for Windows (previously known as RDP Proxy)

PSM for SSH (previously known as PSM SSH Proxy)

All of the above

NO.28 The ACME Company has been a CyberArk customer for many years. ACME Management has asked you to perform a “Health Check” review of the CyberArk deployment. During your analysis you discover that the PSM Component server is fully functional. The RDP SSL certificate is self-signed and the CyberArk Privileged Session Management Service is running under the Local Service. SSL 3.0 is enabled in the Registry.

The PSM Component Server is configured as defined in PAS Installation Guide.

The PSM Component Server has been installed correctly but PSM Hardening procedures have not been followed and must be rebuilt.

The PSM Component Server has been installed correctly but PSM Hardening procedures have not been followed. Hardening procedures must be applied manually to the existing configuration.

The PSM Component Server has been installed correctly but PVWA Hardening procedures have not been followed. Hardening procedures can be applied via the Installation Automation script or manually to the existing configuration.

NO.29 A Simple Network Management Protocol (SNMP) integration allows the Vault administrator to forward ITALOG records to a monitoring solution.

True

False

NO.30 Which report shows the accounts that are accessible to each user?

Activity Report

Entitlement Report

Privileged Accounts Compliance Status Report

Applications Inventory Report

NO.31 What are the operating system prerequisites for installing CPM? Select all that apply.

NET 3.51 Framework Feature

Web Services Role

Remote Desktop Services Role

Windows 2008 R2 or higher

NO.32 In a Disaster Recovery (DR) environment, which of the following should NEVER be configured for automatic failover due to the possibility of split-brain phenomenon?

Password Vault Web Access (PVWA)

PSM

CPM

PTA

NO.33 CyberArk recommends implementing object level access control on all Safes.

True

False

NO.34 According to the default web options settings, which group grants access to the reports page?

PVWAMonitor

PVWAUsers

Auditors

Vault administrators