CyberArk Sentry - Privilege Cloud (CPC-SEN) Free Practice Test

Question 1

In large-scale environments, it is important to enable the CPM to focus its search operations on specific Safes instead of scanning all Safes it sees in the Vault. How is this accomplished?

A. Administration > Options > CPM Scanner.

B. Administration Options > CPM Settings

C. AllowedSafes Parameter on each platform policy

D. MaxConcurrentConnection parameter on each platform policy

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which statement is correct regarding the LDAP integration with CyberArk Privilege Cloud Standard?

A. For certificate trust to your directory server, only the Issuing CA certificate is required.

B. LDAPS integration with Privilege Cloud requires StartTLS for secure and encrypted communication.

C. You must track the expiration date of the directory server certificate and contact CyberArk Support to renew it.

D. The top-level domain entry of the directory must be unique in the chosen Privilege Cloud region.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

What is the recommended method to enable load balancing and failover of the CyberArk Identity Connector?

A. Set up a network load balancer between two or more CyberArk Identity Connector servers.

B. Set up two or more CyberArk Identity Connector servers only.

C. Setup IIS based Application Request Routing on two or more CyberArk Identity Connector servers.

D. Set up a Microsoft Failover Cluster on two or more CyberArk Identity Connector servers.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Your customer recently merged with a smaller organization. The customer's connector has no network connectivity to the smaller organization's infrastructure. You need to map LDAP users from both your customer and the smaller organization. How is this achieved?

A. Deploy Identity Connectors in the newly acquired infrastructure and create user mappings.

B. Create mappings for both directories from the original Identity Connector.

C. Switch all users to SAML authentication as there can only be one Identity Connector.

D. Create the required users in one directory and configure the Identity Connector to read that directory, as there can only be one Identity Connector.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which authentication methods does PSM for SSH support? (Choose 2.)

A. MFA Caching

B. RADIUS

C. SAML

D. OIDC

E. Client Authentication Certificate

Correct Answer: B,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

How can a platform be configured to work with load-balanced PSMs?

A. Use the Privilege Cloud Portal to update the Session Management settings for the platform in the Master Policy.

B. Remove all entries from configured PSM Servers except for the ID of the PSMs with load balancing.

C. Create a new PSM definition that targets the load balancer IP address and assign to the platform.

D. Include details of the PSMs with load balancing in the Basic_psm.ini file on each PSM server.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

CyberArk Sentry - Privilege Cloud (CPC-SEN) Free Practice Test