CYBERARK REVIEW QUESTIONS & ANSWERS
Ratio of privileged accounts to normal? - Answers -3 x 1
Advanced core PAS - Answers -OPM/EPM for NIX/Windows and Domain Controller
protection
Encryption process - Answers -Passwords -> files key -> Safe key -> Server key
Remote control agent uses port - Answers -9022
Vault logs for debug - Answers -Trace.d0 (debug file)
Vault logs - Answers -Dbparm.ini (config file. Require vault service restart)
Passparm.ini (password policy for users of the vault)
PARagent (remote contrl agent)
TSparm (configure physical disks used to store vault data)
ITAlog (main log file)
Trace.d0 (debug file)
Initial vault safes - Answers -notification engine, system, vault internal
Maximum number of objects in safe - Answers -20000
Max Safe name characters - Answers -28
Where is license file located - Answers -in safe or program files
CPM services - Answers -cyberark password manager, cyberark central policy manager
scanner (x86 directory)
CPM logs - Answers -CPM logs:
• Pm.log (all log messages)
• Om_error.log (only warning and error messages)
• Third party logs in third party folder
• History log files in history folder
CPM safes - Answers -psswordmanagershared (shared by all CPM)
passwordmanager_pending (shared by all CPM)
passwordManager
PasswordManage_ADInternal
PM_info, PM_Workspace
, PVWA log location - Answers -%windir%\temp\PVWA (can be changed sing log folder
param in web.config IIS)
PVWA Safes - Answers -PVWA config, PVWA privateuserpreg,s pvwareports, pvwatask
definitions
PSM config file - Answers -basic_psm.ini
PSM log for info and errors - Answers -psmconsole.log
PSM Log for recorder errors - Answers -sessionid.recorder.log
PSM connection client log - Answers -sessionid.connectionclient.log
PSM storage formulas - Answers -numsessions * time ession * recording bit rate +
20GB
Multiple retention time(days) by num sessions for vault
PSMP example usage - Answers -vaultaccount@localaccount@targetip@psmip
PSMP config file - Answers -basic_psmpserver.conf
Component connection tool used to create them - Answers -AutoIT
PTA users - Answers -PTAUser,PTAAppUser,PSMPTAAppIsers
CPM configuration files - Answers -Used for usage accounts
Auto discovery tool - Answers -Linux uses CSV
Windows goes off AD
Password upload utility - Answers -Uses CSV file to upload accounts
Export Vault Data Utility - Answers -exports data to txt or csv
8 Security fundamentals - Answers -Isolate and harden vault
Use 2FA
Restrict access to component servers
Limit privileges and points of administration
Protect sensitive accounts and encryption keys
Use secure protocols
Monitor logs
Create and test DR plam
Ratio of privileged accounts to normal? - Answers -3 x 1
Advanced core PAS - Answers -OPM/EPM for NIX/Windows and Domain Controller
protection
Encryption process - Answers -Passwords -> files key -> Safe key -> Server key
Remote control agent uses port - Answers -9022
Vault logs for debug - Answers -Trace.d0 (debug file)
Vault logs - Answers -Dbparm.ini (config file. Require vault service restart)
Passparm.ini (password policy for users of the vault)
PARagent (remote contrl agent)
TSparm (configure physical disks used to store vault data)
ITAlog (main log file)
Trace.d0 (debug file)
Initial vault safes - Answers -notification engine, system, vault internal
Maximum number of objects in safe - Answers -20000
Max Safe name characters - Answers -28
Where is license file located - Answers -in safe or program files
CPM services - Answers -cyberark password manager, cyberark central policy manager
scanner (x86 directory)
CPM logs - Answers -CPM logs:
• Pm.log (all log messages)
• Om_error.log (only warning and error messages)
• Third party logs in third party folder
• History log files in history folder
CPM safes - Answers -psswordmanagershared (shared by all CPM)
passwordmanager_pending (shared by all CPM)
passwordManager
PasswordManage_ADInternal
PM_info, PM_Workspace
, PVWA log location - Answers -%windir%\temp\PVWA (can be changed sing log folder
param in web.config IIS)
PVWA Safes - Answers -PVWA config, PVWA privateuserpreg,s pvwareports, pvwatask
definitions
PSM config file - Answers -basic_psm.ini
PSM log for info and errors - Answers -psmconsole.log
PSM Log for recorder errors - Answers -sessionid.recorder.log
PSM connection client log - Answers -sessionid.connectionclient.log
PSM storage formulas - Answers -numsessions * time ession * recording bit rate +
20GB
Multiple retention time(days) by num sessions for vault
PSMP example usage - Answers -vaultaccount@localaccount@targetip@psmip
PSMP config file - Answers -basic_psmpserver.conf
Component connection tool used to create them - Answers -AutoIT
PTA users - Answers -PTAUser,PTAAppUser,PSMPTAAppIsers
CPM configuration files - Answers -Used for usage accounts
Auto discovery tool - Answers -Linux uses CSV
Windows goes off AD
Password upload utility - Answers -Uses CSV file to upload accounts
Export Vault Data Utility - Answers -exports data to txt or csv
8 Security fundamentals - Answers -Isolate and harden vault
Use 2FA
Restrict access to component servers
Limit privileges and points of administration
Protect sensitive accounts and encryption keys
Use secure protocols
Monitor logs
Create and test DR plam
