CyberArk PAM-SEN Exam - Topic 3 Question 54 Discussion

Actual exam question for CyberArk's PAM-SEN exam

Question #: 54
Topic #: 3

Your customer upgraded recently to version 12.2 to allow the Linux team to use the new MFA caching feature. The PSM for SSH was installed with default configuration settings. After setting the Authentication to SSH key and enabling MFA Caching from the PVWA interface, the Linux Team cannot connect successfully using the new MFA caching feature.

What is the most probable cause?

AOpenSSH 7.8 or above is not installed.

BThe MFACaching parameter in the psmpparms file is not set to True.

CA passphrase policy must be added.

DMFA caching is not supported when the PSM for SSH is deployed with default settings.

Show Suggested Answer

Suggested Answer: D

by Edward at Jan 24, 2025, 05:37 AM

Limited Time Offer

25%

Off

Get Premium PAM-SEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jennifer

6 months ago

I doubt it's C, passphrase policies shouldn't affect MFA caching.

upvoted 0 times

...

Rochell

6 months ago

A is definitely not the problem, OpenSSH is usually updated.

upvoted 0 times

...

Josephine

6 months ago

Wait, is it true that MFA caching can't work with default settings? That's surprising!

upvoted 0 times

...

Keneth

7 months ago

Totally agree, that seems like the most likely issue.

upvoted 0 times

...

Ligia

7 months ago

I think it's B, the MFACaching parameter needs to be set to True.

upvoted 0 times

...

Ressie

7 months ago

I feel like a passphrase policy might not be directly related to MFA caching, but I could be wrong. It’s hard to remember all the details!

upvoted 0 times

...

Ling

7 months ago

I’m a bit confused about the OpenSSH version requirement. Wasn’t there something about needing 7.8 or higher for MFA caching to work?

upvoted 0 times

...

Jesusita

7 months ago

I think I saw a practice question about default settings and MFA caching not working, so maybe option D could be the issue here.

upvoted 0 times

...

Shawnda

8 months ago

I remember something about the MFACaching parameter needing to be set to True, but I'm not entirely sure if that's the only thing to check.

upvoted 0 times

...

Luisa

8 months ago

This seems straightforward. The question states that the PSM for SSH was installed with default configuration settings, so I'm guessing the answer is that MFA caching is not supported in the default setup.

upvoted 0 times

...

Gail

8 months ago

Okay, let's see here. The Linux team can't connect successfully using the new MFA caching feature, so it's likely a configuration issue. I'll need to pay close attention to the options mentioned in the answer choices.

upvoted 0 times

...

Irene

8 months ago

Hmm, the question mentions a recent upgrade to version 12.2, so I'm guessing the issue is related to that. I'll focus on understanding the new MFA caching feature and how it interacts with the default PSM settings.

upvoted 0 times

...

Ria

8 months ago

This seems like a tricky one. I'll need to carefully review the details about the MFA caching feature and the default PSM for SSH configuration.

upvoted 0 times

...

Son

1 year ago

I'm stumped. Maybe I should have read the PSM for SSH documentation more carefully before the exam.

upvoted 0 times

...

Jin

1 year ago

Haha, the Linux team better brush up on their SSH configuration skills before trying out the new MFA caching feature!

upvoted 0 times

...

Rory

1 year ago

I'm going to go with C. Adding a passphrase policy could be the solution since the question doesn't mention anything about that.

upvoted 0 times

Darrin

11 months ago

D) MFA caching is not supported when the PSM for SSH is deployed with default settings.

upvoted 0 times

...

Clement

11 months ago

C) A passphrase policy must be added.

upvoted 0 times

...

Twila

11 months ago

B) The MFACaching parameter in the psmpparms file is not set to True.

upvoted 0 times

...

In

12 months ago

A) OpenSSH 7.8 or above is not installed.

upvoted 0 times

...

Starr

1 year ago

D seems like the right answer to me. The question mentions the PSM for SSH was installed with default settings, and the prompt says the MFA caching feature is not working, so it's probably not supported in the default configuration.

upvoted 0 times