[Jul-2024] Verified CPC-SEN dumps Q&As - CPC-SEN dumps with Correct Answers [Q23-Q46] : Actual Test Materials : http://blog.actualtests4sure.com

This page was exported from Actual Test Materials [ http://blog.actualtests4sure.com ]
Export date: Fri Nov 15 21:32:01 2024 / +0000 GMT

[Jul-2024] Verified CPC-SEN dumps Q&As - CPC-SEN dumps with Correct Answers [Q23-Q46]

[Jul-2024] Verified CPC-SEN dumps Q&As - CPC-SEN dumps with Correct Answers

The Best CyberArk Sentry Study Guide for the CPC-SEN Exam

NO.23 In the directory lookup order, which directory service is always looked up first for the CyberArk Privilege Cloud solution?

Active Directory

LDAP

Federated Directory

CyberArk Cloud Directory

NO.24 How should you configure PSM for SSH to support load balancing?

by using a network load balancer

in PVWA > Options > PSM for SSH Proxy > Servers

in PVWA > Options > PSM for SSH Proxy > Servers > VIP

by editing sshd.config on the all the PSM for SSH servers

NO.25 After a scripted installation has successfully installed the PSM, which post-installation task is performed?

The screen saver for the PSM local users is disabled.

A new group called PSMShadowUsers is created.

The PSMAdminConnect user password is reset.

Remote desktop services are installed.

NO.26 Which option correctly describes the authentication differences between CyberArk Privilege Cloud and CyberArk PAM Self-Hosted?

CyberArk Privilege Cloud only provides a username and password authentication without third-party IdP integration; CyberArk PAM Self-Hosted uses traditional on-premises methods such as Windows and LDAP. but lacks modern protocols such as SAML or OIDC.

CyberArk Privilege Cloud uses cloud-based methods, integrating with CyberArk Identity for MFA. and supports SAML and OIDC; CyberArk PAM Self-Hosted depends on on-premises methods such as RADIUS and LDAP, but can adopt SAML or OIDC with additional setups.

CyberArk Privilege Cloud requires on-premises components for all authentication and does not support other cloud-based authentication protocols; CyberArk PAM Self-Hosted offers a wide array of methods, including support for SAML. OIDC. and other modern protocols, without needing on-premises components.

Both use the same authentication methods.

NO.27 What are dependencies to update or change the CPM credential? (Choose 2.)

APIKeyManager.exe

CreateCredFile.exe

CPM/nDomain_Hardening.ps1

CyberArk.TPC.exe

Data Execution Prevention

NO.28 You are creating a PSM Load Balanced Virtual Server Configuration.
What are the default service ports / protocols used for RDS and the PSM Health Check service?

RDP/389 HTTP/443

RDP/3389 HTTPS/443
C UDP/53 HTTPS/389

RDP/636 HTTPS/443

NO.29 Before the hardening process, your customer identified a PSM Universal Connector executable that will be required to run on the PSM. Which file should you update to allow this to run?

PSMConfigureAppLocker.xml

PSMHardening.xml

PSMAppConfig.xml

PSMConfigureHardening xml

NO.30 Refer to the exhibit.
You set up your LDAP Directory in CyberArk Identity, but encountered an error during the connection test.
Which scenarios could represent a valid misconfiguration? (Choose 2.)

TCP Port 636 could be blocked by a network firewall, preventing communication between the CyberArk Identity Connector and the LDAP Server.

All required CA Certificates have been installed on the CyberArk Identity Connector but the LDAP Bind credentials provided are incorrect.

Verify Server Certificate’ is activated but the provided hostname is not listed as a Subject Alternative Name (SAN) in the LDAP server’s certificate.

TCP Port 636 could be blocked by a network firewall, preventing communication between the Secure Tunnel and the LDAP Server.

NO.31 Which users are Privilege Cloud Standard built-in users? (Choose 2.)

NASCorp

saascorps

CyberArkAdmin

remoteAccessAppUser

PASReporterUser

NO.32 What is the recommended method to enable load balancing and failover of the CyberArk Identity Connector?

Setup IIS based Application Request Routing on two or more CyberArk Identity Connector servers.

Set up a network load balancer between two or more CyberArk Identity Connector servers.

Set up two or more CyberArk Identity Connector servers only.

Set up a Microsoft Failover Cluster on two or more CyberArk Identity Connector servers.

NO.33 You plan to install Privilege Cloud Connectors on your AWS and Azure environments.
What is the maximum number of concurrent RDP/SSH sessions that each connector can handle for Large Implementations?

1-10

31-60

100

200

NO.34 A CyberArk Privileged Cloud Shared Services customer asks you how to find recent failed login events for all users. Where can you do this without generating reports?

Privileged Cloud Portal

Identity Administration Portal
C both Identity Administration and Identity User Portals

Identity User Portal

NO.35 Which tool configures the user object that will be used during the installation of the PSM for SSH component?

CreateUserPass

CreateCredFile

ConfigureCredFile

ConfigureUserPass

NO.36 In large-scale environments, it is important to enable the CPM to focus its search operations on specific Safes instead of scanning all Safes it sees in the Vault. How is this accomplished?

MaxConcurrentConnection parameter on each platform policy

Administration > Options > CPM Scanner.

AllowedSafes Parameter on each platform policy

Administration Options > CPM Settings

NO.37 What is a supported certificate format for retrieving the LDAPS certificate when not using the Cyberark provided LDAPS certificate tool?

.der

.p7b

p7c

p12

NO.38 CyberArk User Neil is trying to connect to the Target Linux server 192.168.1.164 using a domain user ACMElinuxuser01 on domain acme.corp using PSM for SSH server
192.168.65.145.
What is the correct syntax?

ssh neil@linuxuser01:[email protected]@192.168.65.145

ssh neil@linuxuser01#[email protected]@192.168.65.145

sshneil@[email protected]@192.168.65.145

ssh neil@[email protected]@[email protected]

NO.39 You want to change the default PSM recordings folder path on the Privilege Cloud Connector Arrange the steps to accomplish this in the correct sequence.

NO.40 What must be done before configuring directory mappings in the CyberArk Privilege Cloud Standard Portal for LDAP integration?

Retrieve the LDAPS certificate and deliver it to CyberArk.

Create a new domain in the Privilege Cloud Portal.

Make sure HTTPS (443/tcp) is reachable over the Secure Tunnel.

Ensure the user connecting to the domain has administrative privileges.

NO.41 Which statement is correct regarding the LDAP integration with CyberArk Privilege Cloud Standard?

You must track the expiration date of the directory server certificate and contact CyberArk Support to renew it.

LDAPS integration with Privilege Cloud requires StartTLS for secure and encrypted communication.

For certificate trust to your directory server, only the Issuing CA certificate is required.

The top-level domain entry of the directory must be unique in the chosen Privilege Cloud region.

NO.42 You are deploying a CyberArk Identity Connector to integrate Privilege Cloud Shared Services with an Active Directory environment. Which requirement must be met?

The Identity Connector Server must be joined to the Active Directory.

The Server must be a member of the root domain of the Active Directory forest.
C The Identity Connector must be installed on a Domain Controller.

The Identity Connector must be installed using Domain Administrator credentials.

NO.43 How can a platform be configured to work with load-balanced PSMs?

Remove all entries from configured PSM Servers except for the ID of the PSMs with load balancing.

Create a new PSM definition that targets the load balancer IP address and assign to the platform.

Include details of the PSMs with load balancing in the Basic_psm.ini file on each PSM server.

Use the Privilege Cloud Portal to update the Session Management settings for the platform in the Master Policy.

CPC-SEN certification guide Q&A from Training Expert Actualtests4sure: https://www.actualtests4sure.com/CPC-SEN-test-questions.html

Post date: 2024-07-03 12:44:45
Post date GMT: 2024-07-03 12:44:45
Post modified date: 2024-07-03 12:44:45
Post modified date GMT: 2024-07-03 12:44:45