CyberArk Exam PAM-SEN Topic 1 Question 36 Discussion

Actual exam question for CyberArk's PAM-SEN exam

Question #: 36
Topic #: 1

Which statement about REST API is correct? (Choose two.)

AWhen a user successfully authenticates to the Vault, an authentication token is returned. Most Voted

BREST API Windows authentication method allows skipping the logon API by using the Windows default credentials with a Kerberos ticket.

CTo allow High Availability, REST API can be configured to support Session Load Balancing by editing the PVConfiguration.xml and setting the AllowPVWASessionRedandancy=Yes.

DEach REST API call requires that a valid authentication token be provided. Most Voted

EREST calls are directly sent to the currently active Vault using Port 1858.

Show Suggested Answer

Suggested Answer: A, D

by Zena at May 20, 2024, 03:11 PM

Limited Time Offer

25%

Off

Get Premium PAM-SEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Roslyn

5 months ago

Haha, imagine if the correct answers were 'C' and 'E'. That would be the most insecure REST API ever!

upvoted 0 times

Rusty

4 months ago

Yeah, that would definitely be a security nightmare!

upvoted 0 times

...

Rusty

4 months ago

D) Each REST API call requires that a valid authentication token be provided. Most Voted

upvoted 0 times

...

Rusty

4 months ago

A) When a user successfully authenticates to the Vault, an authentication token is returned. Most Voted

upvoted 0 times

...

Lorean

5 months ago

This question is a good test of our understanding of REST API security and best practices. I'm glad they're not just asking for textbook definitions.

upvoted 0 times

India

4 months ago

D) Each REST API call requires that a valid authentication token be provided. Most Voted

upvoted 0 times

...

India

4 months ago

A) When a user successfully authenticates to the Vault, an authentication token is returned. Most Voted

upvoted 0 times

...

Leana

5 months ago

E is just plain wrong. REST calls are sent over standard HTTP/HTTPS ports, not a specific Vault port.

upvoted 0 times

...

Garry

5 months ago

C is a bit suspicious. Editing the configuration file to enable session load balancing? That sounds like a hack, not a proper REST API feature.

upvoted 0 times

Annalee

4 months ago

I agree, editing configuration files for session load balancing seems risky.

upvoted 0 times

...

Annalee

4 months ago

D) Each REST API call requires that a valid authentication token be provided. Most Voted

upvoted 0 times

...

Asuncion

5 months ago

D) Each REST API call requires that a valid authentication token be provided. Most Voted

upvoted 0 times

...

Asuncion

5 months ago

A) When a user successfully authenticates to the Vault, an authentication token is returned. Most Voted

upvoted 0 times

...

Thea

5 months ago

D) Each REST API call requires that a valid authentication token be provided. Most Voted

upvoted 0 times

...

Annalee

5 months ago

A) When a user successfully authenticates to the Vault, an authentication token is returned. Most Voted

upvoted 0 times

...

Thea

5 months ago

A) When a user successfully authenticates to the Vault, an authentication token is returned. Most Voted

upvoted 0 times

...

Arlette

6 months ago

B is definitely wrong. Windows authentication should not bypass the logon process. That would be a major security risk.

upvoted 0 times

...

Karl

6 months ago

A and D seem to be the correct answers. The Vault authentication token and requiring a valid token for each REST API call are essential security features.

upvoted 0 times