CyberArk PAM-SEN Exam Questions - Real Practice Questions for Guaranteed Success

Question 1

As a member of a PAM Level-2 support team, you are troubleshooting an issue related to load balancing four PVWA servers at two data centers. You received a note from your Level-1 support team stating ''When testing PVWA website from a workstation, we noticed that the ''Source IP of last sign-in'' was shown as the VIP (Virtual IP address) assigned to the four PVWA servers instead of the workstation IP where the PVWA site was launched from.''

Which step should you take?

AVerify the ''LoadBalancerClientAddressHeader'' parameter setting in PVWA configuration file Web.config is set to ''X-Forwarded-For''.

BAdd the VIP (Virtual IP address) assigned to the four PVWA servers to the certificates issued for all four PVWA servers, if missing.

CAdd a firewall rule to allow the testing workstation to connect to the VIP (Virtual IP address) assigned to the four PVWA servers on Port TCP 443.

DEdit the dbparm.ini file on the Vault server and add the IP or subnet of the workstation to the whitelist.

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AVerify the ''LoadBalancerClientAddressHeader'' parameter setting in PVWA configuration file Web.config is set to ''X-Forwarded-For''.

BAdd the VIP (Virtual IP address) assigned to the four PVWA servers to the certificates issued for all four PVWA servers, if missing.

CAdd a firewall rule to allow the testing workstation to connect to the VIP (Virtual IP address) assigned to the four PVWA servers on Port TCP 443.

DEdit the dbparm.ini file on the Vault server and add the IP or subnet of the workstation to the whitelist.

0 / 1500

Question 2

Which statement is correct about a post-install hardening?

AThe Vault must be hardened during the Vault installation process. Most Voted

BAfter the Vault server is installed, you must join the server to the Enterprise Domain and reboot the host.

CIt is executed after Vault installation by running CAVaultHarden.exe and hardening options can be edited by changing the Hardening.ini file. Most Voted

DIf it is mandated by an organization's IT governance, you do not have to execute Vault hardening; however, server hardening cannot be reversed.

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe Vault must be hardened during the Vault installation process. Most Voted

BAfter the Vault server is installed, you must join the server to the Enterprise Domain and reboot the host.

CIt is executed after Vault installation by running CAVaultHarden.exe and hardening options can be edited by changing the Hardening.ini file. Most Voted

DIf it is mandated by an organization's IT governance, you do not have to execute Vault hardening; however, server hardening cannot be reversed.

0 / 1500

Question 3

Which command should be executed to harden a Vault after registering it to Azure?

AHardenAzureFW.ps1 Most Voted

BExecuteStage ./Hardening/HardeningConf.xml

CHardenVaultFW.ps1

DExecuteStage ./PostInstallation/PostInstallation.xml

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AHardenAzureFW.ps1 Most Voted

BExecuteStage ./Hardening/HardeningConf.xml

CHardenVaultFW.ps1

DExecuteStage ./PostInstallation/PostInstallation.xml

0 / 1500

Question 4

After installing the Vault, you need to allow Firewall Access for Windows Time service to sync with NTP servers 10.1.1.1 and 10.2.2.2.

What should you do?

AEdit DBParm.ini to add: AllowNonStandardFWAddresses=[10.1.1.1,10.2.2.2],Yes,123:outbound/udp. Most Voted

BEdit DBParm.ini to add: NTPServer=[10.1.1.1:123/UDP,10.2.2.2:123/UDP].

CEdit DBParm.ini to add: AllowNonStandardFWAddresses=[10.1.1.1,10.2.2.2],Yes,123:outbound/udp,123:inbound/udp.

DEdit the Windows Firewall configuration to add a rule for Port 123/udp outbound to 10.1.1.1 and 10.2.2.2.

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AEdit DBParm.ini to add: AllowNonStandardFWAddresses=[10.1.1.1,10.2.2.2],Yes,123:outbound/udp. Most Voted

BEdit DBParm.ini to add: NTPServer=[10.1.1.1:123/UDP,10.2.2.2:123/UDP].

CEdit DBParm.ini to add: AllowNonStandardFWAddresses=[10.1.1.1,10.2.2.2],Yes,123:outbound/udp,123:inbound/udp.

DEdit the Windows Firewall configuration to add a rule for Port 123/udp outbound to 10.1.1.1 and 10.2.2.2.

0 / 1500

Question 5

Which service must be set to Automatic (delayed start) after the Vault is installed and configured?

AWindows Time service

BPrivateArk Database

CWindows Update service

DPrivateArk Server

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AWindows Time service

BPrivateArk Database

CWindows Update service

DPrivateArk Server

0 / 1500

Master CyberArk PAM-SEN Exam with Reliable Practice Questions

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: