Question 1

Which command should be executed to harden a Vault after registering it to Azure?

Options :

A : HardenAzureFW.ps1

B : ExecuteStage ./Hardening/HardeningConf.xml

C : HardenVaultFW.ps1

D : ExecuteStage ./PostInstallation/PostInstallation.xml

Answer: C

Question 2

How should you configure PSM for SSH to support load balancing?

Options :

A : by using a network load balancer

B : in PVWA > Options > PSM for SSH Proxy > Servers

C : in PVWA > Options > PSM for SSH Proxy > Servers > VIP

D : by editing sshd.config on the all the PSM for SSH servers

Answer: A

Question 3

The connect button requires PSM to work.

Options :

A : TRUE

B : FALSE

Answer: B

Question 4

What is a valid combination of primary and secondary layers of authentication to a company's two-factor authentication policy?

Options :

A : RSA SecurID Authentication (in PVWA) and LDAP Authentication

B : CyberArk Authentication and RADIUS Authentication

C : Oracle SSO (in PVWA) and SAML Authentication

D : LDAP Authentication and RADIUS Authentication

Answer: A

Question 5

To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

Options :

A : Add the FQDN & IP details for each LDAP host into the local hosts file of the Vault server.

B : Configure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.

C : Ensure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.

D : Set the ReferralsDNSLookup parameter value to “No” in the directory configuration.

Answer: A