CyberArk PAM-SEN Practice Exams
Last updated on Oct 22,2026- Exam Code: PAM-SEN
- Exam Name: CyberArk Sentry – PAM
- Certification Provider: CyberArk
- Latest update: Oct 22,2026
What is the best practice for storing the Master CD?
- A . Copy the files to the Vault server and discard the CD.
- B . Copy the contents of the CD to a Hardware Security Module and discard the CD.
- C . Store the CD in a secure location, such as a physical safe.
- D . Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions} on the vault.
A stand alone Vault server requires DNS services to operate properly.
- A . TRUE
- B . FALSE
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply
- A . Store the CD in a physical safe and mount the CD every time vault maintenance is performed.
- B . Copy the contents of the CD to the System Safe on the vault
- C . Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.
- D . Store the server key in a Hardware Security Module.
- E . Store the server key in the Provider cache
There is a requirement for a password to change between 01:00 and 03:00 on Saturdays and Sundays; however, this does not work consistently.
Which platform setting may be the cause?
- A . The Interval setting for the platform is incorrect and must be less than 120.
- B . The ImmediateInterval setting for the platform is incorrect and must be greater than or equal to 1.
- C . The DaysToRun setting for the platform is incorrect and must be set to Sat,Sun.
- D . The HeadStartInterval setting for the platform is incorrect and must be set to 0.
Which of the following are prerequisites for installing PVWA Check all that Apply.
- A . Web Services Role
- B . NET 4.5.1 Framework Feature
- C . Remote Desktop Services Role
- D . Windows BitLocker
What is the purpose of the password Reconcile process?
- A . To test that CyberArk is storing accurate credentials for accounts.
- B . To change the password of an account according to organizationally defined password rules
- C . To allow CyberArk to manage unknown or lost credentials.
- D . To generate a new complex password.
DRAG DROP
Arrange the steps to install the Password Vault Web Access (PVWA) in the correct sequence.
Which statements are correct about the PSM HTML5 gateway? (Choose two.)
- A . Smart card redirection is supported
- B . It does not support connections to target system where NLA is enabled on the PSM server
- C . SSH sessions cannot be established
- D . Printer redirection cannot be enabled
- E . It does not support session recording capabilities for applications that run outside a web browser
A customer has three data centers distributed globally and wants highly-available PSM connections in each segmented zone. In addition, the customer needs a highly-available PSM connection for the CyberArk Admins.
What will best satisfy this customer’s needs?
- A . one PSM per zone with a load balancer and two PSMs for Admins with a load balancer
- B . six PSMs in the mam data center with a load balancer and one PSM for Admins
- C . two PSMs per zone with a load balancer and two PSMs for Admins with a dedicated load balancer
- D . three PSMs per zone with CyberArk built-in load balancing
When integrating a Vault with HSM, which file is uploaded to the HSM device?
- A . server.key
- B . recpub.key
- C . recprv.key
- D . mdbase.dat