CyberArk PAM-SEN 問題練習

Question No : 1
In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es).

• A.TRUE
• B.FALSE

答えを確認する

正解:

Question No : 2
The vault server uses a modified version of the Microsoft Windows firewall.

• A.TRUE
• B.FALSE

答えを確認する

正解:

Question No : 3
The primary purpose of the CPM is Password Management.

• A.TRUE
• B.FALSE

答えを確認する

正解:
Explanation:
Reference: https://www.cse-cst.gc.ca/en/system/files/pdf_documents/cyberark-v91-sec-eng.pdf (7)

Question No : 4
If a transparent user matches two different directory mappings, how does the system determine which user template to use?

• A.The system will use the template for the mapping listed first.
• B.The system will use the template for the mapping listed last.
• C.The system will grant all of the vault authorizations from the two templates.
• D.The system will grant only the vault authorizations that are listed in both templates.

答えを確認する

正解:

Question No : 5
In order to avoid conflicts with the hardening process, third party applications like Antivirus and Backup Agents should be installed on the Vault server before installing the Vault.

• A.TRUE
• B.FALSE

答えを確認する

正解:

Question No : 6
When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.

• A.True, this is the default behavior.
• B.False, this is not possible.
• C.True, if the ‘AllowFailback’ setting is set to yes in the PAD
• D.ini file.
• E.True, if the ‘AllowFailback’ setting is set to yes in the dbparm.ini file.

答えを確認する

正解:

Question No : 7
Which file would you modify to configure the vault to send SNMP traps to your monitoring solution?

• A.dbparm.ini
• B.paragent.ini
• C.ENEConf.ini
• D.padr.ini

答えを確認する

正解:

Question No : 8
What is the purpose of the password Reconcile process?

• A.To test that CyberArk is storing accurate credentials for accounts.
• B.To change the password of an account according to organizationally defined password rules.
• C.To allow CyberArk to manage unknown or lost credentials.
• D.To generate a new complex password.

答えを確認する

正解:
Explanation:
Reference: https://www.cyberark.com/blog/securing-privileged-accounts-best-practices-guide-part-4/

Question No : 9
What is the PRIMARY reason for installing more than 1 active CPM?

• A.Installing CPMs in multiple sites prevents complex firewall rules to manage devices at remote sites.
• B.Multiple instances create fault tolerance.
• C.Multiple instances increase response time.
• D.Having additional CPMs increases the maximum number of devices CyberArk can manage.

答えを確認する

正解:

Question No : 10
What would be a good use case for the Replicate module?

• A.Recovery Time Objectives or Recovery Point Objectives are at or near zero.
• B.Integration with an Enterprise Backup Solution is required.
• C.Off site replication is required.
• D.PSM is used.

答えを確認する

正解: