CyberArk PAM-SEN Practice Exams
Last updated on Oct 22,2026- Exam Code: PAM-SEN
- Exam Name: CyberArk Sentry – PAM
- Certification Provider: CyberArk
- Latest update: Oct 22,2026
A customer is moving from an on-premises to a public cloud deployment.
What is the best and most cost-effective option to secure the server key?
- A . Install the Vault in the cloud the same way you would in an on-premises environment. Place the server key in a password protected folder on the operating system.
- B . Install the Vault in the cloud the same way you would in an on-premises environment. Purchase a Hardware Security Module to secure the server key.
- C . Install the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.
- D . Install the Vault using the native cloud images and secure the server key with a Hardware Security
Module.
Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.
- A . Server Key
- B . Recovery Public Key
- C . Recovery Private Key
- D . Safe Key
In an SMTP integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SMTP server address(es)
- A . TRUE
- B . FALSE
The PrivateArk clients allows a user to view the contents of the vault like a filesystem.
- A . TRUE
- B . FALSE
All 80 employees from your satellite Tokyo office are complaining that browsing the PVWA site is very slow; however, your New York headquarters users are not experiencing this.
The current PAM solution is:
2 distributed Vaults, the primary one in New York and a satellite in Tokyo
2 PVWA servers, both in New York with load balancing configured
2 PSM servers, both in New York without load balancing configured
1 CPM server in New York
All PVWA, PSM, and CPM servers are connected to the primary Vault
Which proposal optimally resolves the performance issue while minimizing the impact to production?
- A . Install two new PVWA servers in Tokyo data center, configure load balancing, connect to the local satellite Vault and provide the URL of new PVWA servers to the local employees.
- B . Install two new PVWA servers in New York data center, configure load balancing and have them connect to the satellite Vault in Tokyo.
- C . Install two new PSM servers in the Tokyo data center, configure load balancing, connect to the local satellite vault, and inform the local employees to browse using the same PVWA URL.
- D . Change the current distributed Vaults architecture, migrate back to a Primary-DR architecture, install two new PVWA servers in the Tokyo data center and configure load balancing. Connect to the local DR Vault and provide the URL of new PVWA servers to the local employees.
CyberArk User Neil is trying to connect to the Target Linux server 192.168.1.164 using a domain account ACME/linuxuser01 on domain acme.corp using PSM for SSH server 192.168.65.145.
What is the correct syntax?
- A . ssh neil@linuxuser01: [email protected]@192.168.65.145
- B . ssh neil@linuxuser01#[email protected]@192.168.65.145 Most Voted
- C . ssh neil@[email protected]@192.168.65.145
- D . ssh neil@[email protected]@[email protected]
You are installing multiple PVWAs behind a load balancer.
Which statement is correct?
- A . Port 1858 must be opened between the load balancer and the PVWAs.
- B . The load balancer must be configured in DNS round robin.
- C . The load balancer must support "sticky sessions".
- D . The LoadBalancerClientAddressHeader parameter in the PVWA.ini file must be set.
You are successfully managing passwords in the alpha cyberark com domain; however, when you attempt to manage a password in the beta cyberark com domain, you receive the ‘network path not found’ error.
What should you check first?
- A . That the username and password are correct
- B . That the CPM can successfully resolve addresses in the beta cyberark com domain
- C . That the end user has the correct permissions on the safe.
- D . That an appropriate trust relationship exists between alpha.cyberark com and beta cyberark.com
Which pre-requisite step must be completed before installing a Vault?
- A . Join the server to a domain.
- B . Install a clean operating system.
- C . Install antivirus software.
- D . Copy the master CD to a folder on the Vault server.
Which components can connect to a satellite Vault in a distributed Vault architecture?
- A . CPM, EPM, PTA
- B . PVWA, PSM
- C . CPM, PVWA, PSM
- D . CPM, PSM