CyberArk CPC-SEN Practice Exams
Last updated on Oct 22,2026- Exam Code: CPC-SEN
- Exam Name: CyberArk Sentry - Privilege Cloud
- Certification Provider: CyberArk
- Latest update: Oct 22,2026
What are the basic network requirements to deploy a CPM server?
- A . Port 1858 to the Privilege Cloud Vault service backend and Port 443 to the Privilege Cloud Portal
- B . Port 1858 only
- C . any ports to the Privilege Cloud Vault service backend
- D . Port UDP/1858 to the Privilege Cloud Vault service backend and all required ports to the targets and Port 3389 to the PSM
To disable the PSM default Support for Browser Sessions, which option should be set to ‘No* before running Hardening?
- A . SupportWebApplications
- B . SupportBrowsers
- C . SupportWebBrowsers
- D . SupportHTML5Content
CyberArk User Neil is trying to connect to the Target Linux server 192.168.1.164 using a domain user ACMElinuxuser01 on domain acme.corp using PSM for SSH server 192.168.65.145.
What is the correct syntax?
- A . ssh neil@linuxuser01: [email protected]@192.168.65.145
- B . ssh neil@linuxuser01#[email protected]@192.168.65.145
- C . sshneil@[email protected]@192.168.65.145
- D . ssh neil@[email protected]@[email protected]
When installing the PSM and CPM components on the same Privilege Cloud Connector, what should you consider when hardening?
- A . PSM settings override the CPM settings when referring to the same parameter.
- B . CPM settings override the PSM settings when referring to the same parameter
- C . They can only be installed on the same Privilege Cloud Connector when installed ‘in Domain’.
- D . They can only be installed on the same Privilege Cloud Connector when installed ‘out of Domain’.
What is a default authentication profile to access CyberArk Identity?
- A . Default New User Login Profile
- B . Default New Device Login Profile
- C . Default New Authenticator Profile
- D . Default New Password Profile
Which statement is correct regarding the LDAP integration with CyberArk Privilege Cloud Standard?
- A . You must track the expiration date of the directory server certificate and contact CyberArk Support to renew it.
- B . LDAPS integration with Privilege Cloud requires StartTLS for secure and encrypted communication.
- C . For certificate trust to your directory server, only the Issuing CA certificate is required.
- D . The top-level domain entry of the directory must be unique in the chosen Privilege Cloud region.
You are implementing LDAPS Integration for a standard Privilege Cloud environment.
Which information must be provided to the CyberArk Privilege Cloud support team through a Service Request? (Choose 2.)
- A . LDAPS certificate chain for all domain controllers to be integrated
- B . LDAP bind username and password used to authenticate to the directory to be integrated
C Domain Base Context used to locate the users and groups in the Active Directory to be integrated - C . Fully Qualified Domain Name and IP Address of the domain controllers to be integrated
- D . remote port set during secure tunnel configuration for each domain controller to be integrated
You are implementing LDAPS Integration for a standard Privilege Cloud environment.
Which information must be provided to the CyberArk Privilege Cloud support team through a Service Request? (Choose 2.)
- A . LDAPS certificate chain for all domain controllers to be integrated
- B . LDAP bind username and password used to authenticate to the directory to be integrated
C Domain Base Context used to locate the users and groups in the Active Directory to be integrated - C . Fully Qualified Domain Name and IP Address of the domain controllers to be integrated
- D . remote port set during secure tunnel configuration for each domain controller to be integrated
What must be done before configuring directory mappings in the CyberArk Privilege Cloud Standard Portal for LDAP integration?
- A . Retrieve the LDAPS certificate and deliver it to CyberArk.
- B . Create a new domain in the Privilege Cloud Portal.
- C . Make sure HTTPS (443/tcp) is reachable over the Secure Tunnel.
- D . Ensure the user connecting to the domain has administrative privileges.
Which option correctly describes the authentication differences between CyberArk Privilege Cloud and CyberArk PAM Self-Hosted?
- A . CyberArk Privilege Cloud only provides a username and password authentication without third-party IdP integration; CyberArk PAM Self-Hosted uses traditional on-premises methods such as Windows and LDAP. but lacks modern protocols such as SAML or OIDC.
- B . CyberArk Privilege Cloud uses cloud-based methods, integrating with CyberArk Identity for MFA. and supports SAML and OIDC; CyberArk PAM Self-Hosted depends on on-premises methods such as RADIUS and LDAP, but can adopt SAML or OIDC with additional setups.
- C . CyberArk Privilege Cloud requires on-premises components for all authentication and does not support other cloud-based authentication protocols; CyberArk PAM Self-Hosted offers a wide array of methods, including support for SAML. OIDC. and other modern protocols, without needing on-premises components.
- D . Both use the same authentication methods.