Privileged Session Manager Setup Flashcards

Which Windows feature must be enabled on the PSM server to support Remote Desktop Protocol connections from end users?

Answer: Remote Desktop Services (Terminal Services)

PSM relies on Remote Desktop Services (Terminal Services) to host user sessions on the PSM server and redirect them to target systems.

What is the purpose of the PSMConnect domain user account created during PSM installation?

Answer: It is used to log users into RDP sessions on the PSM server

PSMConnect is a dedicated domain account used to establish RDP sessions on the PSM server on behalf of connecting users.

During PSM hardening, which of the following is restricted to prevent data leakage from a privileged session?

Answer: Clipboard redirection and drive mapping

PSM hardening disables clipboard redirection and drive mapping to prevent users from copying data out of privileged sessions.

Which CyberArk component must PSM communicate with to retrieve target account credentials during session initiation?

Answer: CyberArk Vault (Digital Vault)

PSM connects directly to the CyberArk Vault to retrieve the target account's password at session initiation time.

What is the role of the PSMAdminConnect account in a PSM deployment?

Answer: It is used by CyberArk support to shadow active sessions for troubleshooting

PSMAdminConnect is a privileged domain account that allows authorized admins or CyberArk support to shadow (monitor) live sessions.

In PSM for SSH (PSMP), what protocol does the end user use to connect to the PSMP server?

Answer: SSH over TCP 22

PSMP proxies SSH connections, so users connect to the PSMP server using standard SSH on port 22.

Which file on the PSM server defines the connection components and their associated application connectors?

Answer: basic_psm.ini

basic_psm.ini (and its variants) on the PSM server holds configuration for connection components, dispatcher settings, and recorder options.