CyberArk Sentry - Privilege Cloud - CPC-SEN Exam Questions [2026]

QUESTION NO: 1
What creating a new safe, what is the default number of password versions stored if using 'Save latest account versions' within version management settings?

A. 10 B. 90 C. 5 D. 30

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
You want to change the default PSM recordings folder path on the Privilege Cloud Connector Arrange the steps to accomplish this in the correct sequence.

Correct Answer:

1 - Create a corresponding folder in the new location.
2 - In the Basic_psm.ini file, set RecordingsDirectory with the new path.
3 - Restart the PSM service.
4 - Run the PSMHardening script.

QUESTION NO: 3
According to best practice, when considering the location of PSM Connector servers in Privilege Cloud environments, where should the PSM be placed?

A. near the target devices B. near the Users C. near the CPM servers D. near the Vault (closer to the external internet connection)

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
What are the basic network requirements to deploy a CPM server?

A. any ports to the Privilege Cloud Vault service backend B. Port UDP/1858 to the Privilege Cloud Vault service backend and all required ports to the targets and Port 3389 to the PSM C. Port 1858 only D. Port 1858 to the Privilege Cloud Vault service backend and Port 443 to the Privilege Cloud Portal

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
What is a requirement when installing the PSM on multiple Privileged Cloud Connector servers?

A. Additional Privilege Cloud Connector servers cannot have CPM installed. B. In-domain servers cannot be used when deploying multiple PSM servers. C. All PSMs in the environment must be configured to use load balancing. D. Each PSM must have the same path to the same recordings directory.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
Arrange the steps to failover to the passive CPM in the correct sequence.

Correct Answer:

1 - Validate that the active CPM's services are stopped and set to manual.
2 - On the passive CPM, confirm details in the Vault.ini configuration file, reset the password to the CPM user, and recreate the credential file.
3 - Enable the CPM services on the passive CPM.
4 - Review logs to confirm the passive CPM services are running as expected.