PAM-SEN Practice Test

PAM-SEN Practice Test practice questions, page 4 of 7, with answer review and explanations.

Question 16

When creating a distributed Vault environment architecture, what is the maximum number of Vault servers that can be deployed?

  1. 5 - number of primary and satellite Vaults can be specified during installation
  2. 3 - all primary
  3. 6 - 1 primary and 5 satellite
  4. 10 - 2 primary and 8 satellite

Question 17

Arrange the steps to complete CPM Hardening for Out-of-Domain Deployment in the correct sequence.

Question 18

To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

  1. Add the FQDN & IP details for each LDAP host into the local hosts file of the Vault server.
  2. Configure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.
  3. Ensure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.
  4. Set the ReferralsDNSLookup parameter value to “No” in the directory configuration.

Question 19

In which file must the attribute ‘SignAuthnRequest=”true”’ be added to the PartnerIdentityProvider element to support signed SAML requests?

  1. saml.config
  2. samlconfig.ini
  3. PVWAConfig.xml
  4. PVConfiguration.xml

Question 20

A customer is moving from an on-premises to a public cloud deployment. What is the best and most cost-effective option to secure the server key?

  1. Install the Vault in the cloud the same way you would in an on-premises environment. Place the server key in a password protected folder on the operating system.
  2. Install the Vault in the cloud the same way you would in an on-premises environment. Purchase a Hardware Security Module to secure the server key.
  3. Install the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.
  4. Install the Vault using the native cloud images and secure the server key with a Hardware Security Module.