Free CyberArk PAM-SEN Practice Exam with Questions & Answers | Set: 2

PSMConnect

PSMAdminConnect

PSM

The credentials the end user retrieved from the vault

Review the “Recommended Server Specifications” for PSMs in the CyberArk Documents website. Most Voted

Use the specifications of any existing PSM and request a server of the same size.

Use the CyberArk Support Knowledgebase, search for “PSM Sizing” and locate the Knowledgebase article related to sizing.

Refer to the Microsoft Windows website, determine the minimum specifications required for the Operating System you are installing, and then add 4 Gb of RAM and 20 GB of disk.

CPMs should only access the primary Vault. When it is unavailable, CPM cannot access any Vault until another Vault is promoted as the new primary Vault.

CPMs should access only the satellite Vaults.

CPMs should only access the primary Vault. When it is unavailable, CPM cannot access any Vault until the original primary Vault is operational again.

CPM should access all Vaults - primary and the satellite.

The environment must have at least one Vault and one PVWA installed.

The Vault environment must have at least one account stored in a safe.

Custom platforms must be downloaded from the CyberArk Marketplace.

The PSM component must be installed and proper functionality validated.

Active Directory (AD)

Identity Provider (IdP) Most Voted

Service Provider (SP)

CyberArk Password Vault Web Access (PVWA)

IdP “EntityID” and “PartnerIdentityProvider Name” in PVWA saml.config file

IdP “User name” and “SingleSignOnServiceUrl” in PVWA saml.config file

IdP “Audience” and “ServiceProviderName” in the PVWA saml.config file

IdP “Secure hash algorithm” and “Certificate” in the PVWA saml.config file

NET 3.51 Framework Feature

Web Services Role

Remote Desktop Services Role

Windows 2008 R2 or higher.

Store the CD in a physical safe and mount the CD every time vault maintenance is performed.

Copy the contents of the CD to the System Safe on the vault

Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.

Store the server key in a Hardware Security Module.

Store the server key in the Provider cache

vault.ini

user.cred

psmpparms

psmgw.config

Add the FQDN & IP details for each LDAP host into the local hosts file of the Vault server. Most Voted

Configure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.

Ensure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.

Set the ReferralsDNSLookup parameter value to “No” in the directory configuration.