CYBERARK SENTRY FINAL EXAM 2026 ACTUAL QUESTIONS
AND ANSWERS GRADED A+
✔✔Installation Order - ✔✔Vault
PVWA
CPM
PSM
PSMP
Vault Backup & Disaster Recovery
✔✔PVWA Installation Log Files - ✔✔PVWAInstall.log
PVWAInstallEnv.log
✔✔PVWA Installation Log Files Location -
✔✔C:\Users\Administrator\AppData\Local\Temp
✔✔PVWA Safes - ✔✔PVWAConfig
PVWAProvateUserPrefs
PVWAPublicData
PVWAReports
PVWATaskDefinitions
PVWATicketingSystem
PVWAUserPrefs
✔✔PVWAConfig Safe - ✔✔Contains all the configuration settings for the Password
Vault Web Access
✔✔PVWAPrivateUserPrefs Safe - ✔✔Contains the user preference settings for the
Password Vault Web Access interface
✔✔Which PVWA safes should not be accessed directly? - ✔✔PVWAConfig &
PVWAPrivateUserPrefs
✔✔PVWAReports Safe - ✔✔Used for internal processes related to generating reports
✔✔Where is the Policies.xml file located, and what does it contain? - ✔✔It is located in
the PVWAConfig safe, and it contains the "UI & Workflow" settings for all platforms.
✔✔PVWA Vault Users and Groups - ✔✔PVWAppUser
PVWAGWUser
✔✔PVWAppUser - ✔✔Used by the PVWA for internal processing
✔✔PVWAGWUser - ✔✔Impersonates the logged-in user to the Vault
,✔✔Three Phases of PVWA Hardening - ✔✔1. Executing the InstallationAutomation
PowerShell script
2. Applying a CyberArk provided Group Policy Object to the component server
3. Manual procedures
✔✔PVWA Component Server Network Protocols - ✔✔Client for Microsoft Network
File and Printer Sharing for Microsoft Network
Internet Protocol Version 4 (TCP/IPv4)
✔✔What does the PVWA hardening script do? - ✔✔1. Validates roles and services, and
sets file system permissions
2. Creates local users to run CyberArk services
3. An update to the CyberArk hardening Group Policy object is required to grant the
users "Logon on as a service" right
4. Creates local users to run CyberArk services
5. Removes unneeded IIS MimeTypes
6. Disables SSL and enables TLS 1.2, sets Advanced Audit Policy and other Registry
settings
7. Redirects HTTP to HTTPS
✔✔PVWA Hardening Script Log File Location - ✔✔\Password Vault Web
Access\InstallationAutomation\Date_Time
✔✔Reasons for Multiple PVWA Servers - ✔✔1. Fault tolerance and Disaster Recovery
in the Web interface
2. Additional capacity for heavy end user traffic
3. Reduction of web traffic over WAN lines for remote site users
4. To provide a second, less-privileged web interface for external users
(vendors/contractors)
✔✔What does the CPM Pre-installation script enable? - ✔✔TLS 1.2
✔✔CPM Installation Pre-requisites - ✔✔1. At least one PVWA server must be installed
prior to installing the CPM
2. The required Microsoft Redistributable Packages
✔✔When do you select "Yes" to the question of if the CPM was previously installed? -
✔✔Only in the case of re-installing CPM software, that will use the license of a
previously installed CPM.
✔✔CPM Installation Log File Location - ✔✔C:\Users\Administrator\AppData\Local\Temp
✔✔CPM Installation Log File - ✔✔CPMInstall.log
, ✔✔CPM Bin Directory - ✔✔Contains all of the files required to run the CPM and the
Change Password processes on remote machines
✔✔CPM Logs Directory - ✔✔Contains the CPM activity logs
✔✔CPM Samples Directory - ✔✔Contains samples of all the default policy files
✔✔CPM tmp Directory - ✔✔Contains files that are used by the CPM for internal
processing
✔✔CPM Vault Directory - ✔✔Contains the Vault.ini parameter file
✔✔CPM Services - ✔✔CyberArk Password Manager
CyberArk Central Policy Manager Scanner
✔✔CyberArk Password Manager Service - ✔✔Executes all password management
operations
✔✔CyberArk Central Policy Manager Scanner - ✔✔Associated with the Accounts
Discovery utility
✔✔CPM Activity Logs - ✔✔pm.log
pm_error.log
✔✔pm.log - ✔✔Contains all the log messages, including general and information
messages, errors, and warnings for the CPM
✔✔pm_error.log - ✔✔Contains only warning and error messages for the CPM
✔✔CPM History Logs - ✔✔After a log file file has been uploaded into the Safe, it is
renamed and moved into the History subfolder.
✔✔CPM Safes - ✔✔PasswordManager
PassowrdManager_ADInternal
PasswordManager_info
PasswordManager_Pending
PasswordManager_workspace
PasswordManagerShared
PasswordManager_Temp
✔✔What is stored in the PasswordManager safe? - ✔✔CPM configuration file. Changes
in the System Configuration section in the PVWA are stored here.
AND ANSWERS GRADED A+
✔✔Installation Order - ✔✔Vault
PVWA
CPM
PSM
PSMP
Vault Backup & Disaster Recovery
✔✔PVWA Installation Log Files - ✔✔PVWAInstall.log
PVWAInstallEnv.log
✔✔PVWA Installation Log Files Location -
✔✔C:\Users\Administrator\AppData\Local\Temp
✔✔PVWA Safes - ✔✔PVWAConfig
PVWAProvateUserPrefs
PVWAPublicData
PVWAReports
PVWATaskDefinitions
PVWATicketingSystem
PVWAUserPrefs
✔✔PVWAConfig Safe - ✔✔Contains all the configuration settings for the Password
Vault Web Access
✔✔PVWAPrivateUserPrefs Safe - ✔✔Contains the user preference settings for the
Password Vault Web Access interface
✔✔Which PVWA safes should not be accessed directly? - ✔✔PVWAConfig &
PVWAPrivateUserPrefs
✔✔PVWAReports Safe - ✔✔Used for internal processes related to generating reports
✔✔Where is the Policies.xml file located, and what does it contain? - ✔✔It is located in
the PVWAConfig safe, and it contains the "UI & Workflow" settings for all platforms.
✔✔PVWA Vault Users and Groups - ✔✔PVWAppUser
PVWAGWUser
✔✔PVWAppUser - ✔✔Used by the PVWA for internal processing
✔✔PVWAGWUser - ✔✔Impersonates the logged-in user to the Vault
,✔✔Three Phases of PVWA Hardening - ✔✔1. Executing the InstallationAutomation
PowerShell script
2. Applying a CyberArk provided Group Policy Object to the component server
3. Manual procedures
✔✔PVWA Component Server Network Protocols - ✔✔Client for Microsoft Network
File and Printer Sharing for Microsoft Network
Internet Protocol Version 4 (TCP/IPv4)
✔✔What does the PVWA hardening script do? - ✔✔1. Validates roles and services, and
sets file system permissions
2. Creates local users to run CyberArk services
3. An update to the CyberArk hardening Group Policy object is required to grant the
users "Logon on as a service" right
4. Creates local users to run CyberArk services
5. Removes unneeded IIS MimeTypes
6. Disables SSL and enables TLS 1.2, sets Advanced Audit Policy and other Registry
settings
7. Redirects HTTP to HTTPS
✔✔PVWA Hardening Script Log File Location - ✔✔\Password Vault Web
Access\InstallationAutomation\Date_Time
✔✔Reasons for Multiple PVWA Servers - ✔✔1. Fault tolerance and Disaster Recovery
in the Web interface
2. Additional capacity for heavy end user traffic
3. Reduction of web traffic over WAN lines for remote site users
4. To provide a second, less-privileged web interface for external users
(vendors/contractors)
✔✔What does the CPM Pre-installation script enable? - ✔✔TLS 1.2
✔✔CPM Installation Pre-requisites - ✔✔1. At least one PVWA server must be installed
prior to installing the CPM
2. The required Microsoft Redistributable Packages
✔✔When do you select "Yes" to the question of if the CPM was previously installed? -
✔✔Only in the case of re-installing CPM software, that will use the license of a
previously installed CPM.
✔✔CPM Installation Log File Location - ✔✔C:\Users\Administrator\AppData\Local\Temp
✔✔CPM Installation Log File - ✔✔CPMInstall.log
, ✔✔CPM Bin Directory - ✔✔Contains all of the files required to run the CPM and the
Change Password processes on remote machines
✔✔CPM Logs Directory - ✔✔Contains the CPM activity logs
✔✔CPM Samples Directory - ✔✔Contains samples of all the default policy files
✔✔CPM tmp Directory - ✔✔Contains files that are used by the CPM for internal
processing
✔✔CPM Vault Directory - ✔✔Contains the Vault.ini parameter file
✔✔CPM Services - ✔✔CyberArk Password Manager
CyberArk Central Policy Manager Scanner
✔✔CyberArk Password Manager Service - ✔✔Executes all password management
operations
✔✔CyberArk Central Policy Manager Scanner - ✔✔Associated with the Accounts
Discovery utility
✔✔CPM Activity Logs - ✔✔pm.log
pm_error.log
✔✔pm.log - ✔✔Contains all the log messages, including general and information
messages, errors, and warnings for the CPM
✔✔pm_error.log - ✔✔Contains only warning and error messages for the CPM
✔✔CPM History Logs - ✔✔After a log file file has been uploaded into the Safe, it is
renamed and moved into the History subfolder.
✔✔CPM Safes - ✔✔PasswordManager
PassowrdManager_ADInternal
PasswordManager_info
PasswordManager_Pending
PasswordManager_workspace
PasswordManagerShared
PasswordManager_Temp
✔✔What is stored in the PasswordManager safe? - ✔✔CPM configuration file. Changes
in the System Configuration section in the PVWA are stored here.
