Question 1

What must you do to synchronize a new Vault server with an organization’s NTP server?

• A. Configure an AllowNonStandardFWAddresses rule for the organization’s NTP server in DBParm.ini on the Vault server.
• B. Use the Windows Firewall console to configure a rule on the Vault server which allows communication with the organization’s NTP server.
• C. Ensure the organization’s NTP server is installed in the same location as the Vault server requiring synchronization.
• D. Update the AutoSyncExternalObjects configuration in DBParm.ini on the Vault server to schedule regular synchronization.

Question 2

This value needs to be added to the PVWA configuration file:
Assuming all CyberArk PVWA servers were installed using default paths/folders, which configuration
file should you locate and edit to accomplish this?

• A. c:\inetpub\wwwroot\passwordvault\web.config
• B. c:\inetpub\wwwroot\passwordvault\services\web.config
• C. c:\cyberark\password vault web access\env\web.config
• D. c:\program files\cyberark\password vault web access\web.config

Question 3

A customer has five main data centers with one PVWA in each center under different URLs.
How can you make this setup fault tolerant?

• A. This setup is already fault tolerant.
• B. Install more PVWAs in each data center.
• C. Continuously monitor PVWA status and send users the link to another PVWA if issues are encountered.
• D. Load balance all PVWAs under same URL.

Question 4

A customer asked you to help scope the company's PSM deployment.
What should be included in the scoping conversation?

• A. Recordings file path
• B. Recordings codec
• C. Recordings retention period
• D. Recordings file type

Question 5

A customer has three data centers distributed globally and wants highly-available PSM connections
in each segmented zone. In addition, the customer needs a highly-available PSM connection for the
CyberArk Admins.
What will best satisfy this customer's needs?

• A. one PSM per zone with a load balancer and two PSMs for Admins with a load balancer
• B. six PSMs in the mam data center with a load balancer and one PSM for Admins
• C. two PSMs per zone with a load balancer and two PSMs for Admins with a dedicated load balancer
• D. three PSMs per zone with CyberArk built-in load balancing

Question 6

A customer has two data centers and requires a single PVWA url.
Which deployment provides the fastest time to reach the PVWA and the most redundancy?

• A. Deploy two PVWAs behind a global traffic manager.
• B. Deploy one PVWA only.
• C. Deploy two PVWAs in an active/standby mode.
• D. Deploy two PVWAs using DNS round robin.

Question 7

You are installing multiple PVWAs behind a load balancer.
Which statement is correct?

• A. Port 1858 must be opened between the load balancer and the PVWAs.
• B. The load balancer must be configured in DNS round robin.
• C. The load balancer must support "sticky sessions".
• D. The LoadBalancerClientAddressHeader parameter in the PVWA.ini file must be set.

Question 8

DRAG DROP

Arrange the steps to failover to the DR CPM in the correct sequence.

Question 9

How should you configure PSM for SSH to support load balancing?

• A. by using a network load balancer Most Voted
• B. in PVWA > Options > PSM for SSH Proxy > Servers
• C. in PVWA > Options > PSM for SSH Proxy > Servers > VIP
• D. by editing sshd.config on the all the PSM for SSH servers

Question 10

In which configuration file on the Vault can filters be configured to either include or exclude log
messages that are sent through SNMP?

• A. PARAgent.ini
• B. DBParm.ini
• C. TSParm.ini
• D. CyberArkv2 MIB file

Question 11

A first PSM server has been installed.
What should you confirm before installing any additional PSM servers?

• A. The PSM ID of the first installed PSM server was changed and the additional PSM server can use the same PSM ID.
• B. The user performing the installation is a direct owner in the PSMUnmanagedSessionAccounts Safe, PSM safe and member of PVWAMonitor group.
• C. The user performing the installation is not a direct owner in the PSMUnmanagedSessionAccounts Safe. Most Voted
• D. The path of the Recordings Folder must be different on all PSM installations.

Question 12

Which statement about REST API is correct? (Choose two.)

• A. When a user successfully authenticates to the Vault, an authentication token is returned. Most Voted
• B. REST API Windows authentication method allows skipping the logon API by using the Windows default credentials with a Kerberos ticket.
• C. To allow High Availability, REST API can be configured to support Session Load Balancing by editing the PVConfiguration.xml and setting the AllowPVWASessionRedandancy=Yes.
• D. Each REST API call requires that a valid authentication token be provided. Most Voted
• E. REST calls are directly sent to the currently active Vault using Port 1858.

Question 13

HTML5 Gateway can be installed on which supported UNIX OS versions? (Choose two.)

• A. Red Hat Enterprise Linux 7.x
• B. CentOS 7.x
• C. Ubuntu 20.x
• D. AK 7.x
• E. Android 11.x

Question 14

When creating a distributed Vault environment architecture, what is the maximum number of Vault
servers that can be deployed?

• A. 5 - number of primary and satellite Vaults can be specified during installation
• B. 3 - all primary
• C. 6 - 1 primary and 5 satellite
• D. 10 - 2 primary and 8 satellite

Question 15

In which file must the attribute ‘SignAuthnRequest=”true”’ be added to the PartnerIdentityProvider
element to support signed SAML requests?

• A. saml.config
• B. samlconfig.ini
• C. PVWAConfig.xml
• D. PVConfiguration.xml