PAM-SEN Free Practice Test

To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

1. A. Add the FQDN & IP details for each LDAP host into the local hosts file of the Vault serve
2. B. Most Voted
3. C. Configure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.
4. D. Ensure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.
5. E. Set the ReferralsDNSLookup parameter value to “No” in the directory configuration.

Correct Answer: A

The connect button requires PSM to work.

1. A. TRUE
2. B. FALSE

Correct Answer: B

What is a valid combination of primary and secondary layers of authentication to a company's two-factor authentication policy?

1. A. RSA SecurID Authentication (in PVWA) and LDAP Authentication
2. B. CyberArk Authentication and RADIUS Authentication
3. C. Oracle SSO (in PVWA) and SAML Authentication
4. D. LDAP Authentication and RADIUS Authentication

Correct Answer: A

When creating a distributed Vault environment architecture, what is the maximum number of Vault servers that can be deployed?

1. A. 5 - number of primary and satellite Vaults can be specified during installation
2. B. 3 - all primary
3. C. 6 - 1 primary and 5 satellite
4. D. 10 - 2 primary and 8 satellite

Correct Answer: C

The vault server uses a modified version of the Microsoft Windows firewall.

1. A. TRUE
2. B. FALSE

Correct Answer: B