Free Practice CyberArk PAM-SEN Exam Questions 2025

Stay ahead with 100% Free CyberArk Sentry - PAM PAM-SEN Dumps Practice Questions

Page: 1 / 27

Total 135 Questions | Updated On: Apr 24, 2025

Add To Cart

Question 1

What is a valid combination of primary and secondary layers of authentication to a company's two-factor authentication policy?

A : RSA SecurID Authentication (in PVWA) and LDAP Authentication

B : CyberArk Authentication and RADIUS Authentication

C : Oracle SSO (in PVWA) and SAML Authentication

D : LDAP Authentication and RADIUS Authentication

Answer: A

Question 2

To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

A : Add the FQDN & IP details for each LDAP host into the local hosts file of the Vault server.

B : Configure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.

C : Ensure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.

D : Set the ReferralsDNSLookup parameter value to “No” in the directory configuration.

Answer: A

Question 3

Which command should be executed to harden a Vault after registering it to Azure?

A : HardenAzureFW.ps1

B : ExecuteStage ./Hardening/HardeningConf.xml

C : HardenVaultFW.ps1

D : ExecuteStage ./PostInstallation/PostInstallation.xml

Answer: C

Question 4

A stand alone Vault server requires DNS services to operate properly.

A : TRUE

B : FALSE

Answer: B

Question 5

What is a step to enable NTP synchronization on a stand-alone Vault?

A : Run Powershell and add the NTP module.

B : Restart the organization's NTP servers.

C : Edit dbparm.ini and add a Firewall rule for the NTP address.

D : Restart the Vault Event Notification Engine service.

Answer: C

Page: 1 / 27

Total 135 Questions | Updated On: Apr 24, 2025

Add To Cart