CyberArk PAM-SEN Practice Exams
Last updated on Oct 22,2026- Exam Code: PAM-SEN
- Exam Name: CyberArk Sentry – PAM
- Certification Provider: CyberArk
- Latest update: Oct 22,2026
What utility is used to create or update a credential file?
- A . CreateCredFile exe
- B . CAVaultManager.exe
- C . Central Policy Manager
- D . Password Vault Web Access
After installing the first PSM server and before installing additional PSM servers, you must ensure the user performing the installation is not a direct owner of which safe?
- A . PSMUnmanagedSessionAccounts Safe
- B . PSMRecordingsSessionAccounts Safe
- C . PSMUnmanagedApplicationAccounts Safe
- D . PSMSessionBackupAccounts Safe
When SAML authentication is used to sign in to the PVWA, which service performs the actual authentication?
- A . Active Directory (AD)
- B . Identity Provider (IdP) Most Voted
- C . Service Provider (SP)
- D . CyberArk Password Vault Web Access (PVWA)
At what point is a transparent user provisioned in the vault?
- A . When a directory mapping matching that user id is created.
- B . When a vault admin runs LDAP configuration wizard.
- C . The first time the user logs in.
- D . During the vault’s nightly LD|^P refresh
You are designing the number of PVWAs a customer must deploy. The customer has three data centers with a distributed Vault in each, requires high availability, and wants to use all Vaults at all times.
How many PVWAs does the customer need?
- A . six or more
- B . four
- C . two or less
- D . three
You want to improve performance on the CPM by restricting accounts for the CYBRWINDAD platform to only the WINDEMEA and WINDEMEA_Admin safes.
How do you set this in CyberArk?
- A . In the CYBRWINDAD platform, under Automatic Password Management/General, configure AllowedSafes and set to (WINDEMEA)|(WINDEMEA_ADMIN). Most Voted
- B . In the settings for Configuration/CPM assigned to the WINDEMEA and WINDEMEAADMIN safes, configure AllowedSafes and set to (WINDEMEA)|(WINDEMEAADMIN).
- C . In the CYBRWINDAD platform, under UI&Workflows/Properties/Optional, configure AllowedSafes and set to (WINDEMEA)|(WINDEMEA_ADMIN).
- D . Modify cpm.ini on the relevant CPM/s and add the setting AllowedSafesCYBRWINDAD and set to (WINDEMEA)|(WINDEMEAADMIN).
DRAG DROP –
Arrange the steps to complete CPM Hardening for Out-of-Domain Deployment in the correct sequence.
When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.
- A . True, this is the default behavior
- B . False, this is not possible
- C . True, if the ‘AllowFailback’ setting is set to yes in the PADR.ini file.
- D . True if the ‘AllowFailback’ setting is set to yes in the dbparm mi file
Which component must be installed before the first CPM installation?
- A . PTA
- B . PSM
- C . PVWA
- D . EPM
A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication.
Which locations must you update?
- A . on the Vault server in C:WindowsSystem32driversetchosts and in the PVWAApplication under Administration > LDAP Integration > Directories > Hosts
- B . on both the Vault and the PVWA servers in C:WindowsSystem32driversetchosts
- C . in the Private Ark client under Tools > Administrative Tools > Directory Mapping
- D . on the Vault server in the certificate store and on the PVWA server in the certificate store