CyberArk PAM-SEN Practice Exams
Last updated on Apr 13,2025- Exam Code: PAM-SEN
- Exam Name: CyberArk Sentry – PAM
- Certification Provider: CyberArk
- Latest update: Apr 13,2025
Which configuration file and Vault utility are used to migrate the server key to an HSM?
- A . DBparm.ini and CAVaultManager.exe
- B . VaultKeys.ini and CAVaultManager.exe
- C . DBparm.ini and ChangeServerKeys.exe
- D . VaultKeys.ini and ChangeServerKeys.exe
HTML5 Gateway can be installed on which supported UNIX OS versions? (Choose two.)
- A . Red Hat Enterprise Linux 7.x
- B . CentOS 7.x
- C . Ubuntu 20.x
- D . AK 7.x
- E . Android 11.x
In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es)
- A . TRUE
- B . FALSE
Does CyberArk need service accounts on each server to change passwords?
- A . Yes. it requires a domain administrator account to change any password on any server.
- B . Yes. it requires a local administrator account on any Windows server and a root level account on any Unix server.
- C . No. passwords are changed by the Password Provider Agent.
- D . No. the CPM uses the account information stored in the vault to login and change the account’s password using its own credentials
What authentication methods can be implemented to enforce Two-Factor Authentication (2FA) for users authenticating to CyberArk using both the PVWA (through the browser) and the PrivateArk Client?
- A . LDAP and RADIUS Most Voted
- B . CyberArk and RADIUS
- C . SAML and Cyber Ark
- D . SAML and RADIUS
As Vault Admin, you have been asked to enable your organization’s CyberArk users to authenticate using LDAP.
In addition to Audit Users, which permission do you need to complete this task?
- A . Add Network Areas
- B . Manage Directory Mapping
- C . Add/Update Users
- D . Activate Users
How should you configure PSM for SSH to support load balancing?
- A . by using a network load balancer Most Voted
- B . in PVWA > Options > PSM for SSH Proxy > Servers
- C . in PVWA > Options > PSM for SSH Proxy > Servers > VIP
- D . by editing sshd.config on the all the PSM for SSH servers
What must you do to prepare a Windows server for PVWA installation?
- A . In the InstallationAutomation folder, run the PVWA_Prerequisites.ps1 file as an administrator in Powershell. Most Voted
- B . Install the PrivateArk client.
- C . Verify the user performing the installation is Domain Administrator and has logon access to the Vault server.
- D . Enable IPv6.
Which command should be executed to harden a Vault after registering it to Azure?
- A . HardenAzureFW.ps1 Most Voted
- B . ExecuteStage ./Hardening/HardeningConf.xml
- C . HardenVaultFW.ps1
- D . ExecuteStage ./PostInstallation/PostInstallation.xml
Which authentication methods does PSM for SSH support?
- A . CyberArk password LDAP, RADIUS, SAML
- B . LDAP, Windows Authentication, SSH keys
- C . RADIUS, Oracle SSO, CyberArk Password
- D . CyberArk Password, LDAP, RADIUS