PAM-SEN 시험 - CyberArk실제시험문제와 답 - 40문항

Question No : 1

In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es).

A.TRUE
B.FALSE

정답:

Question No : 2

The vault server uses a modified version of the Microsoft Windows firewall.

A.TRUE
B.FALSE

정답:

Question No : 3

The primary purpose of the CPM is Password Management.

A.TRUE
B.FALSE

정답:
Explanation:
Reference: https://www.cse-cst.gc.ca/en/system/files/pdf_documents/cyberark-v91-sec-eng.pdf (7)

Question No : 4

If a transparent user matches two different directory mappings, how does the system determine which user template to use?

A.The system will use the template for the mapping listed first.
B.The system will use the template for the mapping listed last.
C.The system will grant all of the vault authorizations from the two templates.
D.The system will grant only the vault authorizations that are listed in both templates.

정답:

Question No : 5

In order to avoid conflicts with the hardening process, third party applications like Antivirus and Backup Agents should be installed on the Vault server before installing the Vault.

A.TRUE
B.FALSE

정답:

Question No : 6

When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.

A.True, this is the default behavior.
B.False, this is not possible.
C.True, if the ‘AllowFailback’ setting is set to yes in the PAD
D.ini file.
E.True, if the ‘AllowFailback’ setting is set to yes in the dbparm.ini file.

정답:

Question No : 7

Which file would you modify to configure the vault to send SNMP traps to your monitoring solution?

A.dbparm.ini
B.paragent.ini
C.ENEConf.ini
D.padr.ini

정답:

Question No : 8

What is the purpose of the password Reconcile process?

A.To test that CyberArk is storing accurate credentials for accounts.
B.To change the password of an account according to organizationally defined password rules.
C.To allow CyberArk to manage unknown or lost credentials.
D.To generate a new complex password.

정답:
Explanation:
Reference: https://www.cyberark.com/blog/securing-privileged-accounts-best-practices-guide-part-4/

Question No : 9

What is the PRIMARY reason for installing more than 1 active CPM?

A.Installing CPMs in multiple sites prevents complex firewall rules to manage devices at remote sites.
B.Multiple instances create fault tolerance.
C.Multiple instances increase response time.
D.Having additional CPMs increases the maximum number of devices CyberArk can manage.

정답:

Question No : 10

What would be a good use case for the Replicate module?

A.Recovery Time Objectives or Recovery Point Objectives are at or near zero.
B.Integration with an Enterprise Backup Solution is required.
C.Off site replication is required.
D.PSM is used.

정답:

CyberArk PAM-SEN 시험