PAM-SEN Online Practice Questions and Answers

After a PSM session is complete, the PSM server uploads the recording to the Vault for long-term storage.

A. TRUE

B. FALSE

In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es)

A. TRUE

B. FALSE

The security of the Vault Server is entirely dependent on the security of the network.

A. TRUE

B. FALSE

What utility is used to create or update a credential file?

A. CreateCredFile exe

B. CAVaultManager.exe

C. Central Policy Manager

D. Password Vault Web Access

Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

A. Server Key

B. Recovery Public Key

C. Recovery Private Key

D. Safe Key

The Remote Desktop Services role must be property licensed by Microsoft.

A. TRUE

B. FALSE

To apply a new license file you must:

A. Upload the license.xml file to the System Safe

B. Upload the license.xml file to the Vaultlnternal Safe.

C. Upload the license.xml file to the System Safe and restart the PrivateArk Server service.

D. Upload the license.xml file to the Vaultlnternal Safe and restart the PrivateArk Server service.

Does CyberArk need service accounts on each server to change passwords?

A. Yes. it requires a domain administrator account to change any password on any server.

B. Yes. it requires a local administrator account on any Windows server and a root level account on any Unix server.

C. No. passwords are changed by the Password Provider Agent.

D. No. the CPM uses the account information stored in the vault to login and change the account's password using its own credentials

A vault admin received an email notification that a password verification process has failed Which service sent the message?

A. The PrivateArk Server Service on the Vault.

B. The CyberArk Password Manager service on the Components Server.

C. The CyberArk Event Notification Engine Service on the Vault

D. The CyberArk Privileged Session Manager service on the Vault.

Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?

A. dbparm.ini

B. PARagent.ini

C. ENEConf.ini

D. padr.ini