Which method can be used to directly authenticate users to PSM for SSH? (Choose three.)

1. A. CyberArk authentication Most Voted
2. B. LDAP authentication Most Voted
3. C. RADIUS authentication Most Voted
4. D. Windows authentication
5. E. SAML authentication
6. F. OpenID Connect (OIDC) authentication

Correct Answer: ABC

Which step is required to register a Vault manually in Amazon Web Services using CAVaultManager?

1. A. Specify Amazon as the cloud vendor using the /CloudVendor Flag
2. B. After running the postinstall utility, restart the "PrivateArk Server" service
3. C. Specify the Cloud region using the /CloudRegion flag
4. D. Specify whether the Vault is distributed or stand alone

Correct Answer: C

Which statements are correct about the PSM HTML5 gateway? (Choose two.)

1. A. Smart card redirection is supported
2. B. It does not support connections to target system where NLA is enabled on the PSM server
3. C. SSH sessions cannot be established
4. D. Printer redirection cannot be enabled
5. E. It does not support session recording capabilities for applications that run outside a web browser

Correct Answer: BD

What is a step to enable NTP synchronization on a stand-alone Vault?

1. A. Run Powershell and add the NTP module.
2. B. Restart the organization's NTP servers.
3. C. Edit dbparm.ini and add a Firewall rule for the NTP address.
4. D. Restart the Vault Event Notification Engine service.

Correct Answer: C

When performing “In Domain” hardening of a PSM server, which steps must be performed? (Choose two.)

1. A. Import CyberArk policy settings from the provided file into a new GP
2. B. Most Voted
3. C. Apply advanced audit on the PSM server.
4. D. Link GPO to a dedicated OU containing CyberArk PSM server
5. E. Most Voted
6. F. Import an INF file to the local machine.
7. G. Configure AppLocker rules to block running unknown executables.

Correct Answer: AC