CyberArk PAM-SEN Exam Questions

Questions for the PAM-SEN were updated on : Jan 22 ,2025

Page 1 out of 10. Viewing questions 1-10 out of 97

Question 1

A first PSM server has been installed.
What should you confirm before installing any additional PSM servers?

  • A. The PSM ID of the first installed PSM server was changed and the additional PSM server can use the same PSM ID.
  • B. The user performing the installation is a direct owner in the PSMUnmanagedSessionAccounts Safe, PSM safe and member of PVWAMonitor group.
  • C. The user performing the installation is not a direct owner in the PSMUnmanagedSessionAccounts Safe.
  • D. The path of the Recordings Folder must be different on all PSM installations.
Answer:

b

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 2

Which authentication methods does PSM for SSH support?

  • A. CyberArk password LDAP, RADIUS, SAML
  • B. LDAP, Windows Authentication, SSH keys
  • C. RADIUS, Oracle SSO, CyberArk Password
  • D. CyberArk Password, LDAP, RADIUS
Answer:

d

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 3

After installing the Vault, you need to allow Firewall Access for Windows Time service to sync with NTP servers 10.1.1.1 and 10.2.2.2.
What should you do?

  • A. Edit DBParm.ini to add: AllowNonStandardFWAddresses=[10.1.1.1,10.2.2.2],Yes,123:outbound/udp.
  • B. Edit DBParm.ini to add: NTPServer=[10.1.1.1:123/UDP,10.2.2.2:123/UDP].
  • C. Edit DBParm.ini to add: AllowNonStandardFWAddresses=[10.1.1.1,10.2.2.2],Yes,123:outbound/udp,123:inbound/udp.
  • D. Edit the Windows Firewall configuration to add a rule for Port 123/udp outbound to 10.1.1.1 and 10.2.2.2.
Answer:

d

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 4

What is the purpose of the CPM_Preinstallation.ps1 script included with the CPM installation package?

  • A. It prompts for input parameters that will be used to pre-populate form fields in the installation wizard.
  • B. It automatically installs the CPM, requiring no additional user input.
  • C. It allows you to install the CPM using a command line approach rather than using the installation wizard.
  • D. It verifies the NET version installed on the server and sets the IIS SSL TLS server configuration.
Answer:

a

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 5

Which method can be used to directly authenticate users to PSM for SSH? (Choose three.)

  • A. CyberArk authentication
  • B. LDAP authentication
  • C. RADIUS authentication
  • D. Windows authentication
  • E. SAML authentication
  • F. OpenID Connect (OIDC) authentication
Answer:

abf

User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
F
50%
Discussions
vote your answer:
A
B
C
D
E
F
0 / 1000

Question 6

Which user is enabled when replicating data between active and stand-by Vaults?

  • A. DR
  • B. Backup
  • C. Operator
  • D. Auditor
Answer:

a

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 7

When configuring RADIUS authentication, which utility is used to create a file containing an encrypted version of the RADIUS secret?

  • A. CAVaultManager
  • B. CACert
  • C. CreateAuthFile
  • D. CreateCredFile
Answer:

c

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 8

Your customer wants to store the Safes Data on Vault Drive D instead of Drive C.
Which file should you edit?

  • A. TSparm.ini
  • B. Vault.ini
  • C. DBparm.ini
  • D. user.ini
Answer:

b

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 9

HTML5 Gateway can be installed on which supported UNIX OS versions? (Choose two.)

  • A. Red Hat Enterprise Linux 7.x
  • B. CentOS 7.x
  • C. Ubuntu 20.x
  • D. AK 7.x
  • E. Android 11.x
Answer:

ab

User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
vote your answer:
A
B
C
D
E
0 / 1000

Question 10

You want to add an additional maintenance user on the PSM for SSH.
How can you accomplish this if InstallCyberarkSSHD is set to Yes or No?

  • A. Create a local user and add it to the PSMMaintenance Group.
  • B. Create a local user called proxymng.
  • C. Create a local user and add it to group configured for the parameter AllowGroups in the /etc/sshd_config file.
  • D. Create a local user, called psmpmng.
Answer:

c

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000
To page 2