CyberArk PAM-SEN Practice Exams
Last updated on Oct 22,2026- Exam Code: PAM-SEN
- Exam Name: CyberArk Sentry – PAM
- Certification Provider: CyberArk
- Latest update: Oct 22,2026
A vault admin received an email notification that a password verification process has failed.
Which service sent the message?
- A . The PrivateArk Server Service on the Vault.
- B . The CyberArk Password Manager service on the Components Server.
- C . The CyberArk Event Notification Engine Service on the Vault
- D . The CyberArk Privileged Session Manager service on the Vault.
When performing “In Domain” hardening of a PSM server, which steps must be performed? (Choose two.)
- A . Import CyberArk policy settings from the provided file into a new GPO. Most Voted
- B . Apply advanced audit on the PSM server.
- C . Link GPO to a dedicated OU containing CyberArk PSM servers. Most Voted
- D . Import an INF file to the local machine.
- E . Configure AppLocker rules to block running unknown executables.
If a transparent user matches two different directory mappings, how does the system determine which user template to use?
- A . The system will use the template for the mapping listed first.
- B . The system will use the template for the mapping listed last.
- C . The system will grant all of the vault authorizations from the two templates.
- D . The system will grant only the vault authorizations that are listed in both templates
When creating a distributed Vault environment architecture, what is the maximum number of Vault servers that can be deployed?
- A . 5 – number of primary and satellite Vaults can be specified during installation
- B . 3 – all primary
- C . 6 – 1 primary and 5 satellite
- D . 10 – 2 primary and 8 satellite
Which step is required to register a Vault manually in Amazon Web Services using CAVaultManager?
- A . Specify Amazon as the cloud vendor using the /CloudVendor Flag
- B . After running the postinstall utility, restart the "PrivateArk Server" service
- C . Specify the Cloud region using the /CloudRegion flag
- D . Specify whether the Vault is distributed or stand alone
Which parameter must be identical for both the Identity Provider (IdP) and the PVWA?
- A . IdP “EntityID” and “PartnerIdentityProvider Name” in PVWA saml.config file
- B . IdP “User name” and “SingleSignOnServiceUrl” in PVWA saml.config file
- C . IdP “Audience” and “ServiceProviderName” in the PVWA saml.config file
- D . IdP “Secure hash algorithm” and “Certificate” in the PVWA saml.config file
Which files does the Vault Installation Wizard prompt you for during the Vault install?
- A . Operator CD and License Most Voted
- B . Master CD and License
- C . Operator CD and Vault Certificate
- D . Master CD and DBparm.ini
Which SMTP address can be set on the Notification Settings page to re-invoke the ENE setup wizard after the initial Vault installation?
- A . 255.255.255.255
- B . 8.8.8.8
- C . 192.168.1.1
- D . 1.1.1.1
You are setting up a Linux host to act as an HTML 5 gateway for PSM sessions.
Which servers need to be trusted by the Linux host to secure communications through the gateway?
- A . PSM and PVWA
- B . PSM and CPM
- C . PVWA and Vault
- D . Vault and PSM
What would be a good use case for the Replicate module?
- A . Recovery Time Objectives or Recovery Point Objectives are at or near zero
- B . Integration with an Enterprise Backup Solution is required.
- C . Off site replication is required.
- D . PSM is used