CYBERARK SENTRY FINAL PAPER EXAM 2026
FULL QUESTIONS AND CORRECT ANSWERS
GRADED A+
◉ Vault Installation Pre-Requisites. Answer: Remove unnecessary
network components
Eliminate DNS entries
Disable WINS
◉ Distributes Vaults Internal Communication Platform. Answer:
RabbitMQ
◉ CyberArk Vault Services. Answer: CyberArk Event Notification
Engine
CyberArk Hardened Windows Firewall
CyberArk Logic Container
PrivateArk Database
PrivateArk Remote Control Agent
PrivateArk Server
◉ Vault Main Configuration Files Folder Location. Answer:
PrivateArk\Server\Conf
,◉ Vault Configuration Files. Answer: dbparm.ini
license.xml
paragent.ini
passparm.ini
tsparm.ini
◉ Vault Log Files Folder Location. Answer: PrivateArk\Server\Logs
◉ Default Vault Safes. Answer: Notification Engine, System, Vault
Internal
◉ Vault Configuration Files Safe. Answer: System Safe (includes the
italog.log)
◉ When do you install HSM software?. Answer: BEFORE installing
CyberArk
◉ What are the steps for integrating the HSM once the Vault is
installed?. Answer: 1. Open FW port to HSM in dbparm.ini
2. Configure HSM in dbparm.ini
3. Enroll the Vault in the HSM server
4. Encrypt PIN code for HSM connectivity
,5. Load existing Server Key to HSM
6. Point dbparm.ini to Server Key on HSM
7. Restart the Vault
8. Generate a new server key on HSM
- Insert Master CD
- Run ChangeServerKeys
9. Point dbparm.ini to the NEW key in HSM
10. Restart the Vault
◉ True or False: All encryption is processed by the Digital Vault
Server?. Answer: False - 95% of encryption happens on the client
side
◉ True or False: The Windows firewall on the Digital Vault server is
managed by the Vault, therefore all firewall rules must be defined in
the main configuration file, dbparm.ini.. Answer: True
◉ True or False: The ITALog.log is the Vault's primary log file. It can
be found in the \PrivateArk\Server directory.. Answer: False - It can
be found in the \PrivateArk\Server\Logs folder.
◉ True or False: CyberArk does not support MAC or DAC, only
RBAC.. Answer: False - It supports all three.
RBAC = granular entitlements
, DAC = enabling creation of custom roles
MAC = Limit where and when users and components can
authenticate to the vault.
◉ Installation Order. Answer: Vault
PVWA
CPM
PSM
PSMP
Vault Backup & Disaster Recovery
◉ PVWA Installation Log Files. Answer: PVWAInstall.log
PVWAInstallEnv.log
◉ PVWA Installation Log Files Location. Answer:
C:\Users\Administrator\AppData\Local\Temp
◉ PVWA Safes. Answer: PVWAConfig
PVWAProvateUserPrefs
PVWAPublicData
PVWAReports
PVWATaskDefinitions
FULL QUESTIONS AND CORRECT ANSWERS
GRADED A+
◉ Vault Installation Pre-Requisites. Answer: Remove unnecessary
network components
Eliminate DNS entries
Disable WINS
◉ Distributes Vaults Internal Communication Platform. Answer:
RabbitMQ
◉ CyberArk Vault Services. Answer: CyberArk Event Notification
Engine
CyberArk Hardened Windows Firewall
CyberArk Logic Container
PrivateArk Database
PrivateArk Remote Control Agent
PrivateArk Server
◉ Vault Main Configuration Files Folder Location. Answer:
PrivateArk\Server\Conf
,◉ Vault Configuration Files. Answer: dbparm.ini
license.xml
paragent.ini
passparm.ini
tsparm.ini
◉ Vault Log Files Folder Location. Answer: PrivateArk\Server\Logs
◉ Default Vault Safes. Answer: Notification Engine, System, Vault
Internal
◉ Vault Configuration Files Safe. Answer: System Safe (includes the
italog.log)
◉ When do you install HSM software?. Answer: BEFORE installing
CyberArk
◉ What are the steps for integrating the HSM once the Vault is
installed?. Answer: 1. Open FW port to HSM in dbparm.ini
2. Configure HSM in dbparm.ini
3. Enroll the Vault in the HSM server
4. Encrypt PIN code for HSM connectivity
,5. Load existing Server Key to HSM
6. Point dbparm.ini to Server Key on HSM
7. Restart the Vault
8. Generate a new server key on HSM
- Insert Master CD
- Run ChangeServerKeys
9. Point dbparm.ini to the NEW key in HSM
10. Restart the Vault
◉ True or False: All encryption is processed by the Digital Vault
Server?. Answer: False - 95% of encryption happens on the client
side
◉ True or False: The Windows firewall on the Digital Vault server is
managed by the Vault, therefore all firewall rules must be defined in
the main configuration file, dbparm.ini.. Answer: True
◉ True or False: The ITALog.log is the Vault's primary log file. It can
be found in the \PrivateArk\Server directory.. Answer: False - It can
be found in the \PrivateArk\Server\Logs folder.
◉ True or False: CyberArk does not support MAC or DAC, only
RBAC.. Answer: False - It supports all three.
RBAC = granular entitlements
, DAC = enabling creation of custom roles
MAC = Limit where and when users and components can
authenticate to the vault.
◉ Installation Order. Answer: Vault
PVWA
CPM
PSM
PSMP
Vault Backup & Disaster Recovery
◉ PVWA Installation Log Files. Answer: PVWAInstall.log
PVWAInstallEnv.log
◉ PVWA Installation Log Files Location. Answer:
C:\Users\Administrator\AppData\Local\Temp
◉ PVWA Safes. Answer: PVWAConfig
PVWAProvateUserPrefs
PVWAPublicData
PVWAReports
PVWATaskDefinitions
