PAM-SEN試験無料問題集（138題）「CyberArk Sentry

出題：1

As a member of a PAM Level-2 support team, you are troubleshooting an issue related to load balancing four PVWA servers at two data centers. You received a note from your Level-1 support team stating "When testing PVWA website from a workstation, we noticed that the "Source IP of last sign-in" was shown as the VIP (Virtual IP address) assigned to the four PVWA servers instead of the workstation IP where the PVWA site was launched from." Which step should you take?

A. Add a firewall rule to allow the testing workstation to connect to the VIP (Virtual IP address) assigned to the four PVWA servers on Port TCP 443.

B. Edit the dbparm.ini file on the Vault server and add the IP or subnet of the workstation to the whitelist.

C. Add the VIP (Virtual IP address) assigned to the four PVWA servers to the certificates issued for all four PVWA servers, if missing.

D. Verify the "LoadBalancerClientAddressHeader" parameter setting in PVWA configuration file Web.config is set to "X-Forwarded-For".

正解：D 解答を投票する

出題：2

What is the purpose of the CPM_Preinstallation.ps1 script included with the CPM installation package?

A. It allows you to install the CPM using a command line approach rather than using the installation wizard.

B. It verifies the NET version installed on the server and sets the IIS SSL TLS server configuration.

C. It automatically installs the CPM, requiring no additional user input.

D. It prompts for input parameters that will be used to pre-populate form fields in the installation wizard.

正解：B 解答を投票する

出題：3

A customer has three data centers distributed globally and wants highly-available PSM connections in each segmented zone. In addition, the customer needs a highly-available PSM connection for the CyberArk Admins.
What will best satisfy this customer's needs?

A. two PSMs per zone with a load balancer and two PSMs for Admins with a dedicated load balancer

B. one PSM per zone with a load balancer and two PSMs for Admins with a load balancer

C. six PSMs in the mam data center with a load balancer and one PSM for Admins

D. three PSMs per zone with CyberArk built-in load balancing

正解：A 解答を投票する

出題：4

Does CyberArk need service accounts on each server to change passwords?

A. No. the CPM uses the account information stored in the vault to login and change the account's password using its own credentials

B. Yes. it requires a domain administrator account to change any password on any server.

C. Yes. it requires a local administrator account on any Windows server and a root level account on any Unix server.

D. No. passwords are changed by the Password Provider Agent.

正解：C 解答を投票する

出題：5

In which configuration file on the Vault can filters be configured to either include or exclude log messages that are sent through SNMP?

A. TSParm.ini

B. CyberArkv2 MIB file

C. DBParm.ini

D. PARAgent.ini

正解：D 解答を投票する

出題：6

What are the operating system prerequisites for installing CPM? Select all that apply.

A. NET 3.51 Framework Feature

B. Web Services Role

C. Remote Desktop Services Role

D. Windows 2008 R2 or higher.

正解：A 解答を投票する

出題：7

You are configuring the Vault to send syslog audit data to your organization's SIEM solution.
What is a valid value for the SyslogServerProtocol parameter in DBPARM.INI file?

A. SMTP

B. SNMP

C. TLS

D. SSH

正解：C 解答を投票する

出題：8

All 80 employees from your satellite Tokyo office are complaining that browsing the PVWA site is very slow; however, your New York headquarters users are not experiencing this. The current PAM solution is:
2 distributed Vaults, the primary one in New York and a satellite in Tokyo
2 PVWA servers, both in New York with load balancing configured
2 PSM servers, both in New York without load balancing configured
1 CPM server in New York
All PVWA, PSM, and CPM servers are connected to the primary Vault
Which proposal optimally resolves the performance issue while minimizing the impact to production?

A. Install two new PSM servers in the Tokyo data center, configure load balancing, connect to the local satellite vault, and inform the local employees to browse using the same PVWA URL.

B. Change the current distributed Vaults architecture, migrate back to a Primary-DR architecture, install two new PVWA servers in the Tokyo data center and configure load balancing. Connect to the local DR Vault and provide the URL of new PVWA servers to the local employees.

C. Install two new PVWA servers in Tokyo data center, configure load balancing, connect to the local satellite Vault and provide the URL of new PVWA servers to the local employees.

D. Install two new PVWA servers in New York data center, configure load balancing and have them connect to the satellite Vault in Tokyo.

正解：C 解答を投票する

出題：9

The security of the Vault Server is entirely dependent on the security of the network.

A. FALSE

B. TRUE

正解：A 解答を投票する

出題：10

A stand alone Vault server requires DNS services to operate properly.

A. FALSE

B. TRUE

正解：A 解答を投票する

PAM-SEN試験無料問題集「CyberArk Sentry - PAM 認定」