Give Push to your Success with CyberArk Certification PAM-DEF-SEN Exam Questions [Q130-Q154]

Q130. Multiple PVWA servers provide automatic load balancing.

Q131. Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp.
When the client’s machine makes an RDP connection to the PSM server, which user will be utilized?

Q132. The password upload utility must run from the CPM server.

Q133. When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA) and receive approval before being able to launch a secure connection via PSM for Windows (previously known as RDP Proxy).

Q134. PSM captures a record of each command that was issues in SQL Plus.

Q135. A vault admin received an email notification that a password verification process has failed Which service sent the message?

Q136. PSM requires the Remote Desktop Session Host role service.

Q137. What is the purpose of the password verify process?

Q138. DRAG DROP
Match the log file name with the CyberArk Component that generates the log.

Q139. Access Control to passwords is implemented by ________________.

Q140. PSM requires the Remote Desktop Gateway role service.

Q141. Which CyberArk components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts’? Select all that apply.

Q142. What values are acceptable in the address field on the Accounts Details.

Q143. Which of the following are prerequisites for installing PVWA Check all that Apply

Q144. You are successfully managing passwords in the alpha.cyberark com domain; however when you attempt to manage a password in the beta.cyberark.com domain, you receive the ‘network path not found* error.
What should you check first?

Q145. To support a fault tolerant and high-availability architecture, the Password Vault Web Access (PVWA) servers must to be configured to communicate with the Primary Vault and Satellite Vaults.
Which file needs to be changed on the PVWA to enable this setup?

Q146. Which one of the built-in Vault users is not automatically added to the safe when it is first created in PVWA?

Q147. Which credentials does CyberArk use when managing a target account?

Q148. The ACME Company has been a CyberArk customer for many years. ACME Management has asked you to perform a “Health Check” review of the CyberArk deployment. During your analysis you discover that the PSM Component server is fully functional. The RDP SSL certificate is self-signed and the CyberArk Privileged Session Management Service is running under the Local Service. SSL 3.0 is enabled in the Registry.

Q149. What is the process to remove object level access control from a Safe?

Q150. In the vault each password is encrypted with a unique encryption key.

Q151. In an SIEM integration it is recommended to use the fully-qualified domain name (FGDN) when specifying the SIEM server address(es).

Q152. Which user is automatically given all Safe authorizations on all Safes?

Q153. Which of the following statements are NOT true when enabling PSM recording for a target Windows server? Choose all that apply

Q154. Customers who have the ‘Access Safe without confirmation’ safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.