Free CyberArk CPC-SEN Exam Dumps Questions & Answers

Which statement best describes a PSM server's network requirements?

• A.  It requires direct access to the internet.
• B.  It requires limited outbound connectivity to Ports 1858 and 443 only.
• C.  It must reach the target system using its native protocols.
• D.  It requires broad inbound firewall rules and outbound traffic should be limited to Port 1858.

When installing the first CPM within Privilege Cloud using the Connector Management Agent, what should you set the Installation Mode to in the CPM section?

• A.  Primary
• B.  Active
• C.  Default
• D.  Passive

According to best practice, when considering the location of PSM Connector servers in Privilege Cloud environments, where should the PSM be placed?

• A.  near the Users
• B.  near the Vault (closer to the external internet connection)
• C.  near the CPM servers
• D.  near the target devices

Arrange the steps to failover to the passive CPM in the correct sequence.

Correct Answer:

1 - Validate that the active CPM's services are stopped and set to manual.
2 - On the passive CPM, confirm details in the Vault.ini configuration file, reset the password to the CPM user, and recreate the credential file.
3 - Enable the CPM services on the passive CPM.
4 - Review logs to confirm the passive CPM services are running as expected.

After correctly configuring reconciliation parameters in the Prod-AIX-Root-Accounts Platform, this error message appears in the CPM log: CACPM410E Ending password policy Prod-AIX-Root-Accounts since the reconciliation task is active but the AllowedSafes parameter was not updated What caused this situation?

• A.  A second CPM is incorrectly configured to manage the reconciliation account's safe which is causing a deadlock situation between the two CPMs.
• B.  The reconciliation account defined in the Platform is in a locked state and is not accessible.
• C.  The AllowedSafes parameter does not include the safe containing the reconciliation account defined in the Platform.
• D.  The CPM is currently configured to use to an unsigned engine.