Free CyberArk PAM-SEN Exam Questions

Become CyberArk Certified with updated PAM-SEN exam questions and correct answers

Page: 1 / 27

Total 135 Questions | Updated On: Jun 17, 2026

Add To Cart

Question 1

To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

A : the FQDN & IP details for each LDAP host into the local hosts file of the Vault server.

B : nfigure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.

C : ure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.

D : t the ReferralsDNSLookup parameter value to “No” in the directory configuration.

Answer: A

Question 2

A customer has two data centers and requires a single PVWA url. Which deployment provides the fastest time to reach the PVWA and the most redundancy?

A : Deploy two PVWAs behind a global traffic manager.

B : Deploy one PVWA only.

C : Deploy two PVWAs in an active/standby mode.

D : Deploy two PVWAs using DNS round robin.

Answer: A

Question 3

Which file would you modify to configure the vault to send SNMP traps to your monitoring solution?

A : parm.ini

B : ragent.ini

C : EConf.ini

D : dr.ini

Answer: B

Question 4

What is a valid combination of primary and secondary layers of authentication to a company's two-factor authentication policy?

A : RSA SecurID Authentication (in PVWA) and LDAP Authentication

B : CyberArk Authentication and RADIUS Authentication

C : Oracle SSO (in PVWA) and SAML Authentication

D : LDAP Authentication and RADIUS Authentication

Answer: A

Question 5

Which command should be executed to harden a Vault after registering it to Azure?

A : rdenAzureFW.ps1

B : ecuteStage ./Hardening/HardeningConf.xml

C : rdenVaultFW.ps1

D : ecuteStage ./PostInstallation/PostInstallation.xml

Answer: C

Page: 1 / 27

Total 135 Questions | Updated On: Jun 17, 2026

Add To Cart