CyberArk PAM-SEN Exam - Topic 5 Question 65 Discussion

Actual exam question for CyberArk's PAM-SEN exam

Question #: 65
Topic #: 5

Which statement about REST API is correct? (Choose two.)

AWhen a user successfully authenticates to the Vault, an authentication token is returned. Most Voted

BREST API Windows authentication method allows skipping the logon API by using the Windows default credentials with a Kerberos ticket.

CTo allow High Availability, REST API can be configured to support Session Load Balancing by editing the PVConfiguration.xml and setting the AllowPVWASessionRedandancy=Yes.

DEach REST API call requires that a valid authentication token be provided. Most Voted

EREST calls are directly sent to the currently active Vault using Port 1858.

Show Suggested Answer

Suggested Answer: A, D

by Almeta at Nov 26, 2025, 12:10 AM

Limited Time Offer

25%

Off

Get Premium PAM-SEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kerry

2 days ago

C sounds interesting, but I still trust A and D more.

upvoted 0 times

...

Valentine

7 days ago

I’m leaning towards B and C. Windows auth is a big deal.

upvoted 0 times

...

Leslie

12 days ago

Agreed! D is definitely right. Every call needs a token.

upvoted 0 times

...

Paulina

18 days ago

I think A and D are correct. Tokens are essential for authentication.

upvoted 0 times

...

Sheldon

23 days ago

I’m not sure about C, sounds a bit complicated.

upvoted 0 times

...

Rene

28 days ago

Definitely A and D, no doubt about it.

upvoted 0 times

...

Alyssa

2 months ago

Wait, does REST really use Port 1858? That's new to me!

upvoted 0 times

...

Sheldon

2 months ago

Haha, E is just ridiculous. A and D are the way to go.

upvoted 0 times

...

Telma

2 months ago

B sounds like a security nightmare. I'll go with A and D.

upvoted 0 times

...

Jackie

2 months ago

C is the funniest option. I'd love to see someone try that in production!

upvoted 0 times

...

Avery

2 months ago

D is definitely correct, but I'm not sure about A.

upvoted 0 times

...

Lucille

2 months ago

A and D are correct.

upvoted 0 times

...

Francesco

3 months ago

E seems off to me; I thought REST calls could go through different ports depending on the configuration.

upvoted 0 times

...

Kati

3 months ago

I think C could be right about load balancing, but I can't recall the exact details about the PVConfiguration.xml file.

upvoted 0 times

...

Dortha

3 months ago

I'm not entirely sure about the specifics of Windows authentication, but B sounds familiar. I feel like I've seen a question like that before.

upvoted 0 times

...

Tegan

3 months ago

I think I've got a good handle on this. A and D seem like the clear winners here. The other options seem a bit iffy to me.

upvoted 0 times

...

Jovita

3 months ago

I remember learning about the authentication token in class, so A is definitely correct. D also sounds familiar, but I'm not 100% sure about the other options.

upvoted 0 times

...