CyberArk PAM-SEN Practice Exams
Last updated on Oct 23,2026- Exam Code: PAM-SEN
- Exam Name: CyberArk Sentry – PAM
- Certification Provider: CyberArk
- Latest update: Oct 23,2026
Your customer upgraded recently to version 12.2 to allow the Linux team to use the new MFA caching feature. The PSM for SSH was installed with default configuration settings. After setting the Authentication to SSH key and enabling MFA Caching from the PVWA interface, the Linux Team cannot connect successfully using the new MFA caching feature.
What is the most probable cause?
- A . OpenSSH 7.8 or above is not installed.
- B . The MFACaching parameter in the psmpparms file is not set to True.
- C . A passphrase policy must be added.
- D . MFA caching is not supported when the PSM for SSH is deployed with default settings.
What are the operating system prerequisites for installing CPM? Select all that apply.
- A . NET 3.51 Framework Feature
- B . Web Services Role
- C . Remote Desktop Services Role
- D . Windows 2008 R2 or higher.
The vault server uses a modified version of the Microsoft Windows firewall.
- A . TRUE
- B . FALSE
Which component should be installed on the Vault if Distributed Vaults are used with PSM?
- A . RabbitMQ
- B . Disaster Recovery
- C . Remote Control Client
- D . Distributed Vault Server
You want to change the name of the PVWAappuser of the second PVWA server.
Which steps are part of the process? (Choose two.)
- A . Update PVWA.ini with new user name
- B . Update Vault.ini with new user name
- C . Create new user in PrivateArk
- D . Rename user in PrivateArk
- E . Create new cred file for user
You are configuring the Vault to send syslog audit data to your organization’s SIEM solution.
What is a valid value for the SyslogServerProtocol parameter in DBPARM.INI file?
- A . TLS
- B . SSH
- C . SMTP
- D . SNMP
A customer has five main data centers with one PVWA in each center under different URLs.
How can you make this setup fault tolerant?
- A . This setup is already fault tolerant.
- B . Install more PVWAs in each data center.
- C . Continuously monitor PVWA status and send users the link to another PVWA if issues are encountered.
- D . Load balance all PVWAs under same URL.
You are installing the HTML5 gateway on a Linux host using the RPM provided.
After installing the Tomcat webapp, what is the next step in the installation process?
- A . Deploy the HTML5 service (guacd). Most Voted
- B . Secure the connection between the guacd and the webapp.
- C . Secure the webapp and JWT validation endpoint.
- D . Configure ASLR.
Which service must be set to Automatic (delayed start) after the Vault is installed and configured?
- A . Windows Time service
- B . PrivateArk Database
- C . Windows Update service
- D . PrivateArk Server
What is the default username for the PSM for SSH maintenance user when InstallCyberarkSSHD is set to yes?
- A . proxymng
- B . psmp_maintenance
- C . psmpmaintenanceuser
- D . psmpmnguser