Free CyberArk Sentry – PAM Exam PAM-SEN Exam Practice Test

What is the best practice for storing the Master CD?

• Copy the files to the Vault server and discard the CD.
• Copy the contents of the CD to a Hardware Security Module and discard the CD.
• Store the CD in a secure location, such as a physical safe.
• Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions} on the vault.

In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es)

• TRUE
• FALSE

Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

• Server Key
• Recovery Public Key
• Recovery Private Key
• Safe Key

The security of the Vault Server is entirely dependent on the security of the network.

• TRUE
• FALSE

Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply

• Store the CD in a physical safe and mount the CD every time vault maintenance is performed.
• Copy the contents of the CD to the System Safe on the vault
• Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.
• Store the server key in a Hardware Security Module.
• Store the server key in the Provider cache

What would be a good use case for the Disaster Recovery module?

• Recovery Time Objectives or Recovery Point Objectives are at or near zero.
• Integration with an Enterprise Backup Solution is required.
• Off site replication is required.
• PSM is used.

The primary purpose of the CPM is Password Management.

• TRUE
• FALSE

Which is the correct order of installation for PAS components?

• Vault, CPM. PVWA, PSM
• CPM, Vault. PSM, PVWA
• Vault, CPM. PSM, PVWA
• PVWA, Vault, CPM, PSM

Name two ways of viewing the ITAlog

• Log into the vault locally and navigate to the Server folder under the PrivateArk install location.
• Log into the PVWA and go to the Reports tab.
• Access the System Safe from the PrivateArk client.
• Go to the Thirdpary log directory on the CPM

If a transparent user matches two different directory mappings, how does the system determine which user template to use?

• The system will use the template for the mapping listed first.
• The system will use the template for the mapping listed last.
• The system will grant all of the vault authorizations from the two templates.
• The system will grant only the vault authorizations that are listed in both templates