Download CyberArk CPC-SEN Exam Dumps to Pass Exam Easily in 2024 [Q14-Q36]

4/5 - (2 votes)

Download CyberArk CPC-SEN Exam Dumps to Pass Exam Easily in 2024

Get 100% Real Free CyberArk Sentry CPC-SEN Sample Questions

NEW QUESTION 14
Arrange the steps to failover to the passive CPM in the correct sequence.

NEW QUESTION 15
You have been tasked with deploying a Privilege Cloud PSM for SSH connector When the initial installation has successfully completed, you create and permission several maintenance users to be used for administering the connector.
Which configuration file must be updated to define these maintenance users?

sshd.config

basic_psmpserver.conf

sshd_config

psmpparms

NEW QUESTION 16
To disable the PSM default Support for Browser Sessions, which option should be set to ‘No* before running Hardening?

SupportWebApplications

SupportBrowsers

SupportWebBrowsers

SupportHTML5Content

NEW QUESTION 17
A CyberArk Privileged Cloud Shared Services customer asks you how to find recent failed login events for all users. Where can you do this without generating reports?

Privileged Cloud Portal

Identity Administration Portal
C both Identity Administration and Identity User Portals

Identity User Portal

NEW QUESTION 18
In large-scale environments, it is important to enable the CPM to focus its search operations on specific Safes instead of scanning all Safes it sees in the Vault. How is this accomplished?

MaxConcurrentConnection parameter on each platform policy

Administration > Options > CPM Scanner.

AllowedSafes Parameter on each platform policy

Administration Options > CPM Settings

NEW QUESTION 19
Which option correctly describes the authentication differences between CyberArk Privilege Cloud and CyberArk PAM Self-Hosted?

CyberArk Privilege Cloud only provides a username and password authentication without third-party IdP integration; CyberArk PAM Self-Hosted uses traditional on-premises methods such as Windows and LDAP. but lacks modern protocols such as SAML or OIDC.

CyberArk Privilege Cloud uses cloud-based methods, integrating with CyberArk Identity for MFA. and supports SAML and OIDC; CyberArk PAM Self-Hosted depends on on-premises methods such as RADIUS and LDAP, but can adopt SAML or OIDC with additional setups.

CyberArk Privilege Cloud requires on-premises components for all authentication and does not support other cloud-based authentication protocols; CyberArk PAM Self-Hosted offers a wide array of methods, including support for SAML. OIDC. and other modern protocols, without needing on-premises components.

Both use the same authentication methods.

NEW QUESTION 20
Which authentication methods does PSM for SSH support? (Choose 2.)

OIDC

MFA Caching

SAML

RADIUS

Client Authentication Certificate

NEW QUESTION 21
You are implementing LDAPS Integration for a standard Privilege Cloud environment.
Which information must be provided to the CyberArk Privilege Cloud support team through a Service Request? (Choose 2.)

remote port set during secure tunnel configuration for each domain controller to be integrated

LDAPS certificate chain for all domain controllers to be integrated

Fully Qualified Domain Name and IP Address of the domain controllers to be integrated

LDAP bind username and password used to authenticate to the directory to be integrated C Domain Base Context used to locate the users and groups in the Active Directory to be integrated

NEW QUESTION 22
According to best practice, when considering the location of PSM Connector servers in Privilege Cloud environments, where should the PSM be placed?

near the CPM servers

near the target devices

near the Vault (closer to the external internet connection)

near the Users

NEW QUESTION 23
What must be done to configure the syslog server IP address(es) for SIEM integration? (Choose 2.)

Submit a service request to CyberArk Support.

Update the syslog server IP address through the Privilege Cloud Portal.

Update the DBPARM.ini file with the correct syslog server IP address.

Update the vault.ini file with the correct syslog server IP address.

Configure the Secure Tunnel for SIEM integration.

NEW QUESTION 24
Which tool configures the user object that will be used during the installation of the PSM for SSH component?

CreateUserPass

CreateCredFile

ConfigureCredFile

ConfigureUserPass

NEW QUESTION 25
You are configuring firewall rules between the Privilege Cloud components and the Privilege Cloud. Which firewall rules should be set up to allow connections?

from the CyberArk Privilege Cloud to the Privilege Cloud components

from the Privilege Cloud components to the CyberArk Privilege Cloud

bi-directionally between the Privilege Cloud components and the CyberArk Privilege cloud

from the Privilege Cloud components to CyberArk.com

NEW QUESTION 26
What is the correct CyberArk user to use when installing the Privilege Cloud Connector software?

installeruser@<suffix>

Administrator

<subdomain>_admin

Installer

NEW QUESTION 27
A support team has asked you to provide the previous password for an account that had its password recently changed by the CPM. In which tab within the account’s overview page can you retrieve this information?

Overview

Activities

Details

Versions

NEW QUESTION 28
When installing the first CPM within Privilege Cloud using the Connector Management Agent, what should you set the Installation Mode to in the CPM section?

Active

Passive

Default

Primary

NEW QUESTION 29
When installing the PSM and CPM components on the same Privilege Cloud Connector, what should you consider when hardening?

PSM settings override the CPM settings when referring to the same parameter.

CPM settings override the PSM settings when referring to the same parameter

They can only be installed on the same Privilege Cloud Connector when installed ‘in Domain’.

They can only be installed on the same Privilege Cloud Connector when installed ‘out of Domain’.

NEW QUESTION 30
What is a requirement when installing the PSM on multiple Privileged Cloud Connector servers?

Each PSM must have the same path to the same recordings directory.

All PSMs in the environment must be configured to use load balancing.

Additional Privilege Cloud Connector servers cannot have CPM installed.

In-domain servers cannot be used when deploying multiple PSM servers.

NEW QUESTION 31
What are dependencies to update or change the CPM credential? (Choose 2.)

APIKeyManager.exe

CreateCredFile.exe

CPM/nDomain_Hardening.ps1

CyberArk.TPC.exe

Data Execution Prevention

NEW QUESTION 32
Arrange the steps to install passive CPM using Connector Management in the correct sequence

NEW QUESTION 33
Before the hardening process, your customer identified a PSM Universal Connector executable that will be required to run on the PSM. Which file should you update to allow this to run?

PSMConfigureAppLocker.xml

PSMHardening.xml

PSMAppConfig.xml

PSMConfigureHardening xml

NEW QUESTION 34
How can a platform be configured to work with load-balanced PSMs?

Remove all entries from configured PSM Servers except for the ID of the PSMs with load balancing.

Create a new PSM definition that targets the load balancer IP address and assign to the platform.

Include details of the PSMs with load balancing in the Basic_psm.ini file on each PSM server.

Use the Privilege Cloud Portal to update the Session Management settings for the platform in the Master Policy.