CyberArk Defender and Sentry Level
Test Questions With 100% Correct
Answers 2026-2027 Updated.
__________ Report provides information about all the accounts in the System. - Answer
Privileged Accounts Inventory Report
__________ Report is for each user and shows Accounts and Safes what they can access in the
System. - Answer Entitlement Report
File for:
- main configuration file of the Vault.
- any change requests requires a restart of the Vault Service. - Answer DBParm.ini
PTA Statistics Log Name - Answer Statistics.log
Within the Vault, each password is encrypted by? - Answer Its own unique key
Good use case for Disaster Recovery module - Answer Offsite replication is required
What would be a good use case for the Replicate Module? - Answer Integration with an
Enterprise Backup Solution is required
PTA Utility Log Name - Answer Diamond-Utility.log
What account automatically onboards unmanaged privileged account? - Answer PTAUser
Provides information about all the privileged accounts in the system required permissions:
- list accounts
- view safe members - Answer Privileged Accounts Inventory Report
The Vault Internal Safe contains all of the configuration for the Vault? - Answer False
Who is in the only user that can edit the Directory Mappings? - Answer Built in Administrator
,What is Applocker used for? - Answer Limits the applications that may be raw on the PSM
machine
Can you set the Cluster Vault Debug Level Dynamically without restarting the Cluster Vault? -
Answer Yes
Can the PVWA be load balanced? - Answer Yes
What happens when multiple discoveries of accounts are on the same domain accounts? -
Answer Multiple discoveries will synchronize all the shared discovered accounts
Purpose and permissions needed for the Activity Log Report - Answer - All audit information in
the Vault
- View audit and audit users
File for:
- configure Remote Control Agent in the Vault
- SNTP Configuration - Answer PARagent.ini
What is the purpose of the Immediate Interval setting in the CPM Policy? - Answer To control
how often the CPM looks for User Initiated CPM work
At what point is a transparent user provisioned in the Vault? - Answer The first time the user
logs in
HA, DR, and Replication are mutually exclusive and cannot be used in the same environment. -
Answer False
Password Upload Utility must be installed on the CPM server. - Answer False
File for:
- Configuring Password Policy for users of the Vault - Answer Passparm.ini
Which report could show all audit data in the Vault? - Answer Activity Log
What is the primary reason for installing more than one active CPM? - Answer Installing CPMS
in multiple sites prevents complex rules to manage devices at remote sites
, Through which component do you configure the CPM? - Answer PVWA
Through which component do you manage internal CyberArk users? - Answer PrivateArk
Client
Which file would you modify to configure your Vault server to forward Activity Logs to a a SIEM
or SYSLOG Server? - Answer DBParm.ini
Which file configures password policy for Vault Users? - Answer Passparm.ini
What does the Export Vault Data Utility do? - Answer Exports the data from the Vault to .txt or
.csu files
What file would you edit to adjust the LDAP Synchronization Parameters? - Answer DBParm.ini
__________ Report provides information about the Application ID's in the System. - Answer
Application Inventory or AIM Report
Domain Accounts are categorized as either __________ or __________? - Answer Privileged
or non-privileged
Vault authorizations may be granted to __________ - Answer LDAP Users and Vault Users
What are the two types of linked accounts? - Answer Logon and reconcile
How do you install the Password Upload Utility? - Answer This doesn't require installation, the
files needed to run are in the folder
You can successfully manage passwords in the alpha.cyberark.com domain but you can not
manage passwords in beta.cyberark.com, You receive "Network path not found." What should
you check first? - Answer That the CPM can successfully resolve addresses in the
beta.cyberark.com
Users may be created in the PVWA. - Answer False, accounts may be manually onboarded but
users must be created in PrivateArk
Safe permissions may be applied to users and groups. - Answer True
Test Questions With 100% Correct
Answers 2026-2027 Updated.
__________ Report provides information about all the accounts in the System. - Answer
Privileged Accounts Inventory Report
__________ Report is for each user and shows Accounts and Safes what they can access in the
System. - Answer Entitlement Report
File for:
- main configuration file of the Vault.
- any change requests requires a restart of the Vault Service. - Answer DBParm.ini
PTA Statistics Log Name - Answer Statistics.log
Within the Vault, each password is encrypted by? - Answer Its own unique key
Good use case for Disaster Recovery module - Answer Offsite replication is required
What would be a good use case for the Replicate Module? - Answer Integration with an
Enterprise Backup Solution is required
PTA Utility Log Name - Answer Diamond-Utility.log
What account automatically onboards unmanaged privileged account? - Answer PTAUser
Provides information about all the privileged accounts in the system required permissions:
- list accounts
- view safe members - Answer Privileged Accounts Inventory Report
The Vault Internal Safe contains all of the configuration for the Vault? - Answer False
Who is in the only user that can edit the Directory Mappings? - Answer Built in Administrator
,What is Applocker used for? - Answer Limits the applications that may be raw on the PSM
machine
Can you set the Cluster Vault Debug Level Dynamically without restarting the Cluster Vault? -
Answer Yes
Can the PVWA be load balanced? - Answer Yes
What happens when multiple discoveries of accounts are on the same domain accounts? -
Answer Multiple discoveries will synchronize all the shared discovered accounts
Purpose and permissions needed for the Activity Log Report - Answer - All audit information in
the Vault
- View audit and audit users
File for:
- configure Remote Control Agent in the Vault
- SNTP Configuration - Answer PARagent.ini
What is the purpose of the Immediate Interval setting in the CPM Policy? - Answer To control
how often the CPM looks for User Initiated CPM work
At what point is a transparent user provisioned in the Vault? - Answer The first time the user
logs in
HA, DR, and Replication are mutually exclusive and cannot be used in the same environment. -
Answer False
Password Upload Utility must be installed on the CPM server. - Answer False
File for:
- Configuring Password Policy for users of the Vault - Answer Passparm.ini
Which report could show all audit data in the Vault? - Answer Activity Log
What is the primary reason for installing more than one active CPM? - Answer Installing CPMS
in multiple sites prevents complex rules to manage devices at remote sites
, Through which component do you configure the CPM? - Answer PVWA
Through which component do you manage internal CyberArk users? - Answer PrivateArk
Client
Which file would you modify to configure your Vault server to forward Activity Logs to a a SIEM
or SYSLOG Server? - Answer DBParm.ini
Which file configures password policy for Vault Users? - Answer Passparm.ini
What does the Export Vault Data Utility do? - Answer Exports the data from the Vault to .txt or
.csu files
What file would you edit to adjust the LDAP Synchronization Parameters? - Answer DBParm.ini
__________ Report provides information about the Application ID's in the System. - Answer
Application Inventory or AIM Report
Domain Accounts are categorized as either __________ or __________? - Answer Privileged
or non-privileged
Vault authorizations may be granted to __________ - Answer LDAP Users and Vault Users
What are the two types of linked accounts? - Answer Logon and reconcile
How do you install the Password Upload Utility? - Answer This doesn't require installation, the
files needed to run are in the folder
You can successfully manage passwords in the alpha.cyberark.com domain but you can not
manage passwords in beta.cyberark.com, You receive "Network path not found." What should
you check first? - Answer That the CPM can successfully resolve addresses in the
beta.cyberark.com
Users may be created in the PVWA. - Answer False, accounts may be manually onboarded but
users must be created in PrivateArk
Safe permissions may be applied to users and groups. - Answer True
