CYBERARK SENTRY EVALUATION 2026 EXAM QUESTIONS
AND ANSWERS GRADED A+
✔✔PSM Safe - ✔✔Contains the password objects of the unique PSM users created
locally
✔✔PSMGW_<MachineName> - ✔✔This is the gateway user through which the PSM
user will access the Vault to retrieve the target machine password
✔✔PSMApp_<MachineName> - ✔✔This user is used by the PSM for internal
processing
✔✔RDP over SSL - ✔✔This is a hardening procedure for the PSM. This enables client
connection encryption on the PSM 9set to high) and enables the use of SSL on the
PSM (set to TLS 1.0). All connection components are configured to use RDP over SSL.
✔✔PSM Hardening Script - ✔✔PSMHardening.ps1
✔✔AppLocker - ✔✔A Microsoft security utility that allows PSM to whitelist applications
based on unique identities of the executable files
✔✔AppLocker Rules File - ✔✔PSMConfigureAppLocker.xml
✔✔AppLocker WhiteList Defaults - ✔✔RDP, Putty, WINSCP
✔✔What is not automatically white-listed by AppLocker? - ✔✔SQL*Plus
✔✔AppLocker Method=Hash - ✔✔AppLocker compares the current hash to the one
recorded when the AppLocker rule was written
✔✔AppLocker Method=Publisher - ✔✔Applocker allows the client application to launch
and does not check the hash value
✔✔AppLocker Script - ✔✔PSMConfigureApplocker.ps1
✔✔PSM Registration Directory - ✔✔\InstallationAutomation\Registration
✔✔PSM Load Balancing Use Cases - ✔✔Disaster Recovery deployment
Fault tolerance
Multiple sites
Performance in a load balanced configuration
✔✔Where to Rename PSM Servers - ✔✔PSM Server ID in PVWA
basic.psm.ini file
,(then restart the CyberArk Privileged Session Manager service)
✔✔Besides adding the RDS SSL certificate directly to the Windows Certificate Store,
where else should it be updated? - ✔✔Server Manager RDS Deployment properties
✔✔When should you move the PSMConnect user to the domain? - ✔✔If ActiveX is the
connection method in a load balanced environment
✔✔PSMP Installation Steps - ✔✔1. Copy the PSM for SSH server's software to the
server
2. Create admin users on the PSM for SSH servers' machine for future admin access
3. Edit the vault.ini file of the installation package to inform the installer where to find the
vault on the network
4. Create a credential file for the built-in Administrator user for the installer
5. Edit the PSMPparms file to define the installation path and accept the SLA
6. Install software dependencies and the RPM package
✔✔PSMP Admin Users - ✔✔proxymng
proxymng<number>
additional users that are specified in the PSMP_MaintenanceUsers parameter in the
sshd_config configuration file
✔✔PSMP Install Log - ✔✔PSMP_install.log
✔✔PSMP_install.log - ✔✔This log file describes the activities that occurred during the
installation process.
✔✔PSMP Install Log Location - ✔✔/var/tmp/PSMP_install.log
✔✔PSMP Vault Environment Log - ✔✔CreateEnv.log
✔✔CreateEnv.log - ✔✔This log file describes the activities that occurred when the Vault
environment for PSM for SSH servers was created.
✔✔CreateEnv.log Location - ✔✔/var/opt/CARKPSMP/temp/CreateEnv.log
✔✔PSMP Bin Directory Location - ✔✔/opt/CARKPSMP/bin
✔✔PSMP Bin Directory Contents - ✔✔PSM for SSH serverserver
createenv
createcredfile
✔✔PSMP Logs Location - ✔✔/var/opt/CARKPSMP/logs/
, ✔✔PSMP Configuration File Location -
✔✔/etc/opt/CARKPSMP/conf/basic_PSMPserver.conf
✔✔PSMP Configuration Files - ✔✔conf (basic configuration file)
vault (vault.ini and cred files)
✔✔PSMP Logs - ✔✔PSMPConsole.log
PSMPTrace.log
✔✔PSMPConsole.log - ✔✔Contains informational messages and errors that refer to
PSM function. This log is meant for the system administrator who needs to monitor the
status of PSM for SSH servers.
✔✔PSMPTrace.log - ✔✔Contains errors and trace messages. The types of messages
that are included depend on the debug levels specified in the main configuration file.
✔✔PSMP Vault Users - ✔✔PSMPApp_<ServerName>
PSMPGW_<ServerName>
✔✔PSMPApp_<ServerName> - ✔✔Used by the PSM for SSH servers for internal
processing
✔✔PSMPGR_<ServerName> - ✔✔
✔✔The PSMP server is hardened during installation on what two platforms? -
✔✔RedHat Liux v6.0 and above
CentOS v6.0 and above
✔✔PSMP Hardening Tasks - ✔✔Partitioning
Software Update
Networking
✔✔PSMP Hardening - Partitioning - ✔✔Use a separate partition for various folders
(check documentation)
✔✔PSMP Hardening - Software Update - ✔✔Verify that the latest patch of the OS is
applied to your environment. Verify that the gpgcheck is globally activated in your yum
repositories.
✔✔PSMP Hardening - Networking - ✔✔Recommended to enable a firewall that only
permits incoming connections on the SSH port. The default SSH port is TCP 22.
✔✔PSMP Root Access - ✔✔The root user will not be able to authenticate to the PSM
for SSH servers server remotely using a password after hardening.
AND ANSWERS GRADED A+
✔✔PSM Safe - ✔✔Contains the password objects of the unique PSM users created
locally
✔✔PSMGW_<MachineName> - ✔✔This is the gateway user through which the PSM
user will access the Vault to retrieve the target machine password
✔✔PSMApp_<MachineName> - ✔✔This user is used by the PSM for internal
processing
✔✔RDP over SSL - ✔✔This is a hardening procedure for the PSM. This enables client
connection encryption on the PSM 9set to high) and enables the use of SSL on the
PSM (set to TLS 1.0). All connection components are configured to use RDP over SSL.
✔✔PSM Hardening Script - ✔✔PSMHardening.ps1
✔✔AppLocker - ✔✔A Microsoft security utility that allows PSM to whitelist applications
based on unique identities of the executable files
✔✔AppLocker Rules File - ✔✔PSMConfigureAppLocker.xml
✔✔AppLocker WhiteList Defaults - ✔✔RDP, Putty, WINSCP
✔✔What is not automatically white-listed by AppLocker? - ✔✔SQL*Plus
✔✔AppLocker Method=Hash - ✔✔AppLocker compares the current hash to the one
recorded when the AppLocker rule was written
✔✔AppLocker Method=Publisher - ✔✔Applocker allows the client application to launch
and does not check the hash value
✔✔AppLocker Script - ✔✔PSMConfigureApplocker.ps1
✔✔PSM Registration Directory - ✔✔\InstallationAutomation\Registration
✔✔PSM Load Balancing Use Cases - ✔✔Disaster Recovery deployment
Fault tolerance
Multiple sites
Performance in a load balanced configuration
✔✔Where to Rename PSM Servers - ✔✔PSM Server ID in PVWA
basic.psm.ini file
,(then restart the CyberArk Privileged Session Manager service)
✔✔Besides adding the RDS SSL certificate directly to the Windows Certificate Store,
where else should it be updated? - ✔✔Server Manager RDS Deployment properties
✔✔When should you move the PSMConnect user to the domain? - ✔✔If ActiveX is the
connection method in a load balanced environment
✔✔PSMP Installation Steps - ✔✔1. Copy the PSM for SSH server's software to the
server
2. Create admin users on the PSM for SSH servers' machine for future admin access
3. Edit the vault.ini file of the installation package to inform the installer where to find the
vault on the network
4. Create a credential file for the built-in Administrator user for the installer
5. Edit the PSMPparms file to define the installation path and accept the SLA
6. Install software dependencies and the RPM package
✔✔PSMP Admin Users - ✔✔proxymng
proxymng<number>
additional users that are specified in the PSMP_MaintenanceUsers parameter in the
sshd_config configuration file
✔✔PSMP Install Log - ✔✔PSMP_install.log
✔✔PSMP_install.log - ✔✔This log file describes the activities that occurred during the
installation process.
✔✔PSMP Install Log Location - ✔✔/var/tmp/PSMP_install.log
✔✔PSMP Vault Environment Log - ✔✔CreateEnv.log
✔✔CreateEnv.log - ✔✔This log file describes the activities that occurred when the Vault
environment for PSM for SSH servers was created.
✔✔CreateEnv.log Location - ✔✔/var/opt/CARKPSMP/temp/CreateEnv.log
✔✔PSMP Bin Directory Location - ✔✔/opt/CARKPSMP/bin
✔✔PSMP Bin Directory Contents - ✔✔PSM for SSH serverserver
createenv
createcredfile
✔✔PSMP Logs Location - ✔✔/var/opt/CARKPSMP/logs/
, ✔✔PSMP Configuration File Location -
✔✔/etc/opt/CARKPSMP/conf/basic_PSMPserver.conf
✔✔PSMP Configuration Files - ✔✔conf (basic configuration file)
vault (vault.ini and cred files)
✔✔PSMP Logs - ✔✔PSMPConsole.log
PSMPTrace.log
✔✔PSMPConsole.log - ✔✔Contains informational messages and errors that refer to
PSM function. This log is meant for the system administrator who needs to monitor the
status of PSM for SSH servers.
✔✔PSMPTrace.log - ✔✔Contains errors and trace messages. The types of messages
that are included depend on the debug levels specified in the main configuration file.
✔✔PSMP Vault Users - ✔✔PSMPApp_<ServerName>
PSMPGW_<ServerName>
✔✔PSMPApp_<ServerName> - ✔✔Used by the PSM for SSH servers for internal
processing
✔✔PSMPGR_<ServerName> - ✔✔
✔✔The PSMP server is hardened during installation on what two platforms? -
✔✔RedHat Liux v6.0 and above
CentOS v6.0 and above
✔✔PSMP Hardening Tasks - ✔✔Partitioning
Software Update
Networking
✔✔PSMP Hardening - Partitioning - ✔✔Use a separate partition for various folders
(check documentation)
✔✔PSMP Hardening - Software Update - ✔✔Verify that the latest patch of the OS is
applied to your environment. Verify that the gpgcheck is globally activated in your yum
repositories.
✔✔PSMP Hardening - Networking - ✔✔Recommended to enable a firewall that only
permits incoming connections on the SSH port. The default SSH port is TCP 22.
✔✔PSMP Root Access - ✔✔The root user will not be able to authenticate to the PSM
for SSH servers server remotely using a password after hardening.
