CyberArk CPC-SEN Practice Exams
Last updated on Oct 22,2026- Exam Code: CPC-SEN
- Exam Name: CyberArk Sentry - Privilege Cloud
- Certification Provider: CyberArk
- Latest update: Oct 22,2026
Your customer recently merged with a smaller organization. The customer’s connector has no network connectivity to the smaller organization’s infrastructure. You need to map LDAP users from both your customer and the smaller organization.
How is this achieved?
- A . Create the required users in one directory and configure the Identity Connector to read that directory, as there can only be one Identity Connector.
- B . Create mappings for both directories from the original Identity Connector.
- C . Deploy Identity Connectors in the newly acquired infrastructure and create user mappings.
- D . Switch all users to SAML authentication as there can only be one Identity Connector.
DRAG DROP
You want to change the default PSM recordings folder path on the Privilege Cloud Connector Arrange the steps to accomplish this in the correct sequence.
How does CyberArk ensure data security for credentials stored in the Vault?
- A . By using proprietary encryption algorithms
- B . By storing all data in plain text for easy recovery
- C . By implementing role-based access control
- D . By enabling multifactor authentication for access
Refer to the exhibit.
You set up your LDAP Directory in CyberArk Identity, but encountered an error during the connection test.
Which scenarios could represent a valid misconfiguration? (Choose 2.)
- A . TCP Port 636 could be blocked by a network firewall, preventing communication between the CyberArk Identity Connector and the LDAP Server.
- B . All required CA Certificates have been installed on the CyberArk Identity Connector but the LDAP Bind credentials provided are incorrect.
- C . Verify Server Certificate’ is activated but the provided hostname is not listed as a Subject Alternative Name (SAN) in the LDAP server’s certificate.
- D . TCP Port 636 could be blocked by a network firewall, preventing communication between the Secure Tunnel and the LDAP Server.
In large-scale environments, it is important to enable the CPM to focus its search operations on specific Safes instead of scanning all Safes it sees in the Vault.
How is this accomplished?
- A . Administration Options > CPM Settings
- B . AllowedSafes Parameter on each platform policy
- C . MaxConcurrentConnection parameter on each platform policy
- D . Administration > Options > CPM Scanner.
Which of the following are true about using the Privileged Session Manager (PSM. in CyberArk? (Choose two)
- A . It provides session isolation and monitoring.
- B . It is used to manage network configurations.
- C . It encrypts data at rest by default.
- D . It supports recording of privileged sessions.
What is the recommended method to enable load balancing and failover of the CyberArk Identity Connector?
- A . Setup IIS based Application Request Routing on two or more CyberArk Identity Connector servers.
- B . Set up a network load balancer between two or more CyberArk Identity Connector servers.
- C . Set up two or more CyberArk Identity Connector servers only.
- D . Set up a Microsoft Failover Cluster on two or more CyberArk Identity Connector servers.
What is the correct CyberArk user to use when installing the Privilege Cloud Connector software?
- A . installeruser@<suffix>
- B . Administrator
- C . <subdomain>_admin
- D . Installer
What must be done to configure the syslog server IP address(es) for SIEM integration? (Choose 2.)
- A . Submit a service request to CyberArk Support.
- B . Update the syslog server IP address through the Privilege Cloud Portal.
- C . Update the DBPARM.ini file with the correct syslog server IP address.
- D . Update the vault.ini file with the correct syslog server IP address.
- E . Configure the Secure Tunnel for SIEM integration.