CyberArk PAM-SEN Practice Exams
Last updated on Oct 22,2026- Exam Code: PAM-SEN
- Exam Name: CyberArk Sentry – PAM
- Certification Provider: CyberArk
- Latest update: Oct 22,2026
A customer has five PVWA servers. Three are located at the primary data center and the remaining two are at a satellite data center.
What is important to consider about the load balancer? (Choose two.)
- A . It must not alter page content, or should include a mechanism to prevent pages from being altered. Most Voted
- B . It must support “sticky sessions”. Most Voted
- C . It must be able to digitally sign and issue certificates for PVWA servers.
- D . It must be able to connect to all Vault and PVWA servers through Port TCP 443.
- E . It must be configured with high-availability (HA) enabled.
If a customer has one data center and requires fault tolerance, how many PVWAs should be deployed?
- A . two or more
- B . one PVWA cluster
- C . one
- D . two PVWA clusters
What is the PRIMARY reason for installing more than 1 active CPM?
- A . Installing CPMs in multiple sites prevents complex firewall rules to manage devices at remote sites.
- B . Multiple instances create fault tolerance.
- C . Multiple instances increase response time.
- D . Having additional CPMs increases the maximum number of devices CyberArk can manage
A customer has two data centers and requires a single PVWA url.
Which deployment provides the fastest time to reach the PVWA and the most redundancy?
- A . Deploy two PVWAs behind a global traffic manager.
- B . Deploy one PVWA only.
- C . Deploy two PVWAs in an active/standby mode.
- D . Deploy two PVWAs using DNS round robin.
The Remote Desktop Services role must be property licensed by Microsoft.
- A . TRUE
- B . FALSE
Which is the correct order of installation for PAS components?
- A . Vault, CPM. PVWA, PSM
- B . CPM, Vault. PSM, PVWA
- C . Vault, CPM. PSM, PVWA
- D . PVWA, Vault, CPM, PSM
The RemoteApp feature of PSM allows seamless Application windows (i e the Desktop of the PSM server will not be visible)
- A . TRUE
- B . FALSE
You are beginning the post-install process after a manual PSM installation is completed.
What must you do?
- A . Disable screen saver for the PSM local users.
- B . Create a new group called PSMShadowUsers.
- C . Reset the PSMAdminConnect user password.
- D . Enable load balancing on the PSM server.
Which statement about REST API is correct? (Choose two.)
- A . When a user successfully authenticates to the Vault, an authentication token is returned. Most Voted
- B . REST API Windows authentication method allows skipping the logon API by using the Windows default credentials with a Kerberos ticket.
- C . To allow High Availability, REST API can be configured to support Session Load Balancing by editing the PVConfiguration.xml and setting the AllowPVWASessionRedandancy=Yes.
- D . Each REST API call requires that a valid authentication token be provided. Most Voted
- E . REST calls are directly sent to the currently active Vault using Port 1858.
Which of the following are supported authentication methods for CyberArk? Check all that apply
- A . CyberArk Password (SRP)
- B . LDAP
- C . SAML
- D . PKI
- E . RADIUS
- F . OracleSSO
- G . Biometric