Free CyberArk PAM-SEN Exam Questions

Become CyberArk Certified with updated PAM-SEN exam questions and correct answers

Page: 1 / 27

Total 135 Questions | Updated On: Jul 30, 2025

Add To Cart

Question 1

Which parameter must be provided when registering a primary Vault in Azure, but not in Amazon Web Services?

A : /RecPub

B : /AdminPass

C : /MasterPass

D : /RDPGateway

Answer: D

Question 2

The connect button requires PSM to work.

A : UE

B : LSE

Answer: B

Question 3

What is a valid combination of primary and secondary layers of authentication to a company's two-factor authentication policy?

A : RSA SecurID Authentication (in PVWA) and LDAP Authentication

B : CyberArk Authentication and RADIUS Authentication

C : Oracle SSO (in PVWA) and SAML Authentication

D : LDAP Authentication and RADIUS Authentication

Answer: A

Question 4

Which command should be executed to harden a Vault after registering it to Azure?

A : rdenAzureFW.ps1

B : ecuteStage ./Hardening/HardeningConf.xml

C : rdenVaultFW.ps1

D : ecuteStage ./PostInstallation/PostInstallation.xml

Answer: C

Question 5

To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

A : the FQDN & IP details for each LDAP host into the local hosts file of the Vault server.

B : nfigure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.

C : ure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.

D : t the ReferralsDNSLookup parameter value to “No” in the directory configuration.

Answer: A

Page: 1 / 27

Total 135 Questions | Updated On: Jul 30, 2025

Add To Cart