Learn how to add an additional maintenance user for SSH Privileged Session Manager (PSM) when InstallCyberArk is set to Integrated in CyberArk Sentry – PAM-SEN certification exam. Comprehensive guide with step-by-step instructions.
Table of Contents
Question
You want to add an additional maintenance user on the PSM for SSH.
How can you accomplish this if InstallCyberarkSSHD is set to Integrated?
A. Create a local user and add it to the PSMMaintenance Group.
B. Create a local user called proxymng.
C. Create a local user and add it to group configured for the parameter AllowGroups in the /etc/sshd_config file.
D. Create a local user, called psmpmng.
Answer
C. Create a local user and add it to group configured for the parameter AllowGroups in the /etc/sshd_config file.
Explanation
The correct answer is Option C: Create a local user and add it to the group configured for the parameter AllowGroups in the /etc/sshd_config file.
When InstallCyberArk is set to Integrated, the CyberArk SSH Daemon (SSHD) is used for SSH connections to the PSM. In this configuration, the PSM maintenance users are defined by the groups listed in the AllowGroups parameter in the /etc/sshd_config file.
To add a new maintenance user, follow these steps:
- Create a new local user account on the PSM server.
- Open the /etc/sshd_config file and locate the AllowGroups parameter.
- Add the new user to one of the existing groups listed in the AllowGroups parameter or create a new group and add it to the AllowGroups list.
- Save the changes to the /etc/sshd_config file.
- Restart the CyberArk SSHD service for the changes to take effect.
After completing these steps, the new user account will have maintenance privileges for SSH connections to the PSM.
CyberArk Sentry – PAM-SEN certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the CyberArk Sentry – PAM-SEN exam and earn CyberArk Sentry – PAM-SEN certification.