CyberArk PAM-SEN Practice Exams
Last updated on Oct 23,2026- Exam Code: PAM-SEN
- Exam Name: CyberArk Sentry – PAM
- Certification Provider: CyberArk
- Latest update: Oct 23,2026
The account used to install a PVWA must have ownership of which safes? (Choose two.)
- A . VaultInternal
- B . PVWAConfig
- C . System
- D . Notification Engine
- E . PVWAReports
What is the recommended method to determine if a PVWA is unavailable and should be disabled in a load balancing pool?
- A . Monitor Port 443 on the PVWA server
- B . Monitor Port 1858 on the PVWA server
- C . Ping the PVWA server
- D . Monitor Port 3389 on the PVWA server
You are installing PSM for SSH with AD-Bridge and CyberArkSSHD mode set to integrated for your customer.
Which additional packages do you need to install to meet the customer’s needs? (Choose two.)
- A . CARKpsmp-infra
- B . libssh
- C . OpenSSH 7.8 or higher
- D . CARKpsmp-ADBridge
- E . CARKpsmp-SSHD
What must you do to synchronize a new Vault server with an organization’s NTP server?
- A . Configure an AllowNonStandardFWAddresses rule for the organization’s NTP server in DBParm.ini on the Vault server.
- B . Use the Windows Firewall console to configure a rule on the Vault server which allows communication with the organization’s NTP server.
- C . Ensure the organization’s NTP server is installed in the same location as the Vault server requiring synchronization.
- D . Update the AutoSyncExternalObjects configuration in DBParm.ini on the Vault server to schedule regular synchronization.
In which configuration file do you add LoadBalancerClientAddressHeader when you enable x-forwarding on the PVWA loadbalancer?
- A . PVconfiguration.xml
- B . web.config
- C . apigw.ini
- D . CyberArkScheduledTasks.exe.config
A customer’s environment has three data centers consisting of 5,000 servers in Germany, 10,000 servers in Canada, and 1,500 servers in Singapore. You want to manage target servers and avoid complex firewall rules.
How many CPMs should you deploy?
- A . 1
- B . 3 total, 1 per data center
- C . 15
- D . 6 total, 2 per data center
This value needs to be added to the PVWA configuration file:
Assuming all CyberArk PVWA servers were installed using default paths/folders, which configuration file should you locate and edit to accomplish this?
- A . c:inetpubwwwrootpasswordvaultweb.config
- B . c:inetpubwwwrootpasswordvaultservicesweb.config
- C . c:cyberarkpassword vault web accessenvweb.config
- D . c:program filescyberarkpassword vault web accessweb.config
What is the name of the account used to establish the initial RDP session from the end user client machine to the PSM server?
- A . PSMConnect
- B . PSMAdminConnect
- C . PSM
- D . The credentials the end user retrieved from the vault
Which components support load balancing? (Choose two.)
- A . CPM
- B . PVWA
- C . PSM
- D . PTA
- E . EPV
A customer asked you to help scope the company’s PSM deployment.
What should be included in the scoping conversation?
- A . Recordings file path
- B . Recordings codec
- C . Recordings retention period
- D . Recordings file type