CyberArk CPC-SEN Practice Exams
Last updated on Oct 22,2026- Exam Code: CPC-SEN
- Exam Name: CyberArk Sentry - Privilege Cloud
- Certification Provider: CyberArk
- Latest update: Oct 22,2026
What is required when integrating CyberArk with an external directory service? (Choose three)
- A . Configuration of LDAP synchronization
- B . Secure storage of service account credentials
- C . Periodic manual updates to the directory schema
- D . Use of SAML for directory queries
- E . Establishment of a trust relationship between directories
What is a requirement when installing the PSM on multiple Privileged Cloud Connector servers?
- A . Each PSM must have the same path to the same recordings directory.
- B . All PSMs in the environment must be configured to use load balancing.
- C . Additional Privilege Cloud Connector servers cannot have CPM installed.
- D . In-domain servers cannot be used when deploying multiple PSM servers.
Following the installation of the PSM for SSH server, which additional tasks should be performed? (Choose 2.)
- A . Delete the user.cred file used during installation.
- B . Delete the vault.ini you used during installation.
- C . Delete the psmpparms file you used during installation.
- D . Package all installation log files for upload to CyberArk.
You are deploying a CyberArk Identity Connector to integrate Privilege Cloud Shared Services with an Active Directory environment.
Which requirement must be met?
- A . The Identity Connector Server must be joined to the Active Directory.
- B . The Server must be a member of the root domain of the Active Directory forest.
C The Identity Connector must be installed on a Domain Controller. - C . The Identity Connector must be installed using Domain Administrator credentials.
What creating a new safe, what is the default number of password versions stored if using ‘Save latest account versions’ within version management settings?
- A . 5
- B . 10
- C . 30
- D . 90
Your customer is using Privilege Cloud Shared Services.
What is the correct CyberArk Vault address for this customer?
- A . carkvault-<subdomain>.privilegecloud.cyberark.cloud
- B . vault-<subdomain>.privilegecloud.cyberark.cloud
- C . v-<subdomain>.privilegecloud.cyberark.cloud
- D . carkvlt-<subdomain> privilegecloud.cyberark.cloud
After correctly configuring reconciliation parameters in the Prod-AIX-Root-Accounts Platform, this error message appears in the CPM log: CACPM410E Ending password policy Prod-AIX-Root-Accounts since the reconciliation task is active but the AllowedSafes parameter was not updated.
What caused this situation?
- A . The reconciliation account defined in the Platform is in a locked state and is not accessible.
- B . The CPM is currently configured to use to an unsigned engine.
- C . The AllowedSafes parameter does not include the safe containing the reconciliation account defined in the Platform.
- D . A second CPM is incorrectly configured to manage the reconciliation account’s safe which is causing a deadlock situation between the two CPMs.
According to best practice, when considering the location of PSM Connector servers in Privilege Cloud environments, where should the PSM be placed?
- A . near the CPM servers
- B . near the target devices
- C . near the Vault (closer to the external internet connection)
- D . near the Users
In CyberArk Privilege Cloud, what is the primary function of the Central Policy Manager (CPM)?
- A . To encrypt user data
- B . To monitor network traffic
- C . To manage password rotations and verifications
- D . To log user activities
Which statement best describes a PSM server’s network requirements?
- A . It must reach the target system using its native protocols.
- B . It requires limited outbound connectivity to Ports 1858 and 443 only.
- C . It requires direct access to the internet.
- D . It requires broad inbound firewall rules and outbound traffic should be limited to Port 1858.