CyberArk PAM-SEN Practice Exams
Last updated on Oct 22,2026- Exam Code: PAM-SEN
- Exam Name: CyberArk Sentry – PAM
- Certification Provider: CyberArk
- Latest update: Oct 22,2026
To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?
- A . Add the FQDN & IP details for each LDAP host into the local hosts file of the Vault server. Most Voted
- B . Configure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.
- C . Ensure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.
- D . Set the ReferralsDNSLookup parameter value to “No” in the directory configuration.
For redundancy, you want to add a secondary RADIUS server.
What must you do to accomplish this?
- A . Add to the application settings of the PVWA web.config file.
- B . In the PVWA vault.ini file, list each RADIUS server host address in the "Addresses" attribute separated by commas.
- C . Open the DBParm.ini on the Vault server. Add the second RADIUS server configuration settings after the first one, separated by a comma. Most Voted
- D . In the PVWA web.config file, add the location element at the end of the config file. Set the path value to "Default Web Site/PasswordVault/api/auth/pkipn/logon".
What are the basic network requirements to deploy a CPM server?
- A . Port 1858 to Vault and Port 443 to PVWA
- B . Port 1858 only
- C . all ports to the Vault
- D . Port UDP/1858 to Vault and all required ports to targets and Port 389 to the PSM
Which browser is supported for PSM Web Connectors developed using the CyberArk Plugin Generator Utility (PGU)?
- A . Internet Explorer
- B . Google Chrome
- C . Opera
- D . Firefox
By default, the vault secure protocol uses which IP port and protocol.
- A . TCP/1858
- B . TCP/443
- C . UDP/1858
- D . TCP/80
What is required before the first CPM can be installed?
- A . The environment must have at least one Vault and one PVWA installed.
- B . The Vault environment must have at least one account stored in a safe.
- C . Custom platforms must be downloaded from the CyberArk Marketplace.
- D . The PSM component must be installed and proper functionality validated.
What is the purpose of the PSM health check hardening?
- A . Remove IIS settings which can be considered security vulnerabilities.
- B . Validate that the PSM is ready to be placed behind a load balancer.
- C . Confirm that the Windows Services for PSM are running on the server.
- D . Ensure that the AppLocker script does not have any syntax errors.
Before the hardening process, your customer identified a PSM Universal Connector executable that will be required to run on the PSM.
Which file should you update to allow this to run?
- A . PSMConfigureAppLocker.xml
- B . PSMHardening.xml
- C . PSMAppConfig.xml
- D . PSMConfigureHardening.xml
The security of the Vault Server is entirely dependent on the security of the network.
- A . TRUE
- B . FALSE