CyberArk Sentry Final Exam / Revised
Questions and Answers / Sure A+
A SIEM integration allows you to forward audit records to a monitoring solution. - TRUE
A SIEM integration allows you to forward ITALOG records to a monitoring solution. - false
A stand alone Vault server requires DNS services to operate properly - false
A vault admin received an email notification that a password verification process has failed. From which
services was the message sent? - The CyberArk Event Notification Engine Service on the Vault.
A vault administrator wants to change the PSM server ID to comply with a naming standard. What is the
process for changing the PSM server ID? - First, login to the PVWA, browse to administration,
system config, options, PSM, Configured PSM servers and select the PSM Server you need to change
from the list of servers. In the properties pane, set the value of the ID property to the new Server ID,
click Apply and OK. Next, edit the basic_psmi.ini file located on the PSM server in the PSM root directory
and update the PSMServerID parameter with the new Server ID, save the file and restarted the
"CyberArk PSM" server on PSM server.
At what point is a transparent user provisioned in the vault? - The first time the user logs in.
By default, the vault secure protocol uses which IP port and protocol? - TCP/1858
Does CyberArk need service accounts on each server to change passwords? - No, the CPM uses
account information stored in the vault to login and change the account's password using its own
credentials.
During LDAP/S integration you should specify the FQDN of Domain Controller - true
For the hardening process to complete successfully, security products like Antivirus should be installed
on the Vault server before running the vault installer. - FALSE
, HA, DR, Replicate are mutually exclusive and cannot be used in the same environment. - FALSE
If a transparent user matches two different directory mappings, how does the system determine which
user template to use? - The system will use the template for the mapping listed first.
In an SMTP integration it is recommended to use the FQDN when specifying the SMTP server
address(es) - true
In order to retrieve data from the vault a user MUST use an interface provided by CyberArk. -
TRUE
Multiple PSM Servers can be load balanced - TRUE
Multiple PVWA servers are always all active - true
Multiple PVWA servers provide automatic load balancing. - false
Name two ways of viewing the ITAlog - 1. Log into the vault locally and navigate to the Server
folder under the PrivateArk install location.
2. Access the System Safe from PrivateArk client.
Prior to version 10.7, what is the correct order of installation for PAS components? - Vault, CPM,
PVWA, PSM
PSM requires the Remote Desktop Session Host role service. - TRUE
The connect button requires PSM to work - FALSE
Questions and Answers / Sure A+
A SIEM integration allows you to forward audit records to a monitoring solution. - TRUE
A SIEM integration allows you to forward ITALOG records to a monitoring solution. - false
A stand alone Vault server requires DNS services to operate properly - false
A vault admin received an email notification that a password verification process has failed. From which
services was the message sent? - The CyberArk Event Notification Engine Service on the Vault.
A vault administrator wants to change the PSM server ID to comply with a naming standard. What is the
process for changing the PSM server ID? - First, login to the PVWA, browse to administration,
system config, options, PSM, Configured PSM servers and select the PSM Server you need to change
from the list of servers. In the properties pane, set the value of the ID property to the new Server ID,
click Apply and OK. Next, edit the basic_psmi.ini file located on the PSM server in the PSM root directory
and update the PSMServerID parameter with the new Server ID, save the file and restarted the
"CyberArk PSM" server on PSM server.
At what point is a transparent user provisioned in the vault? - The first time the user logs in.
By default, the vault secure protocol uses which IP port and protocol? - TCP/1858
Does CyberArk need service accounts on each server to change passwords? - No, the CPM uses
account information stored in the vault to login and change the account's password using its own
credentials.
During LDAP/S integration you should specify the FQDN of Domain Controller - true
For the hardening process to complete successfully, security products like Antivirus should be installed
on the Vault server before running the vault installer. - FALSE
, HA, DR, Replicate are mutually exclusive and cannot be used in the same environment. - FALSE
If a transparent user matches two different directory mappings, how does the system determine which
user template to use? - The system will use the template for the mapping listed first.
In an SMTP integration it is recommended to use the FQDN when specifying the SMTP server
address(es) - true
In order to retrieve data from the vault a user MUST use an interface provided by CyberArk. -
TRUE
Multiple PSM Servers can be load balanced - TRUE
Multiple PVWA servers are always all active - true
Multiple PVWA servers provide automatic load balancing. - false
Name two ways of viewing the ITAlog - 1. Log into the vault locally and navigate to the Server
folder under the PrivateArk install location.
2. Access the System Safe from PrivateArk client.
Prior to version 10.7, what is the correct order of installation for PAS components? - Vault, CPM,
PVWA, PSM
PSM requires the Remote Desktop Session Host role service. - TRUE
The connect button requires PSM to work - FALSE
