Cyberark review exam 2023 with complete solution
Ratio of privileged accounts to normal?
3x1
Advanced core PAS
OPM/EPM for NIX/Windows and Domain Controller protection
Encryption process
Passwords -> files key -> Safe key -> Server key
Remote control agent uses port
9022
Vault logs for debug
Trace.d0 (debug file)
Vault logs
Dbparm.ini (config file. Require vault service restart)
Passparm.ini (password policy for users of the vault)
PARagent (remote contrl agent)
TSparm (configure physical disks used to store vault data)
ITAlog (main log file)
Trace.d0 (debug file)
Initial vault safes
notification engine, system, vault internal
Maximum number of objects in safe
20000
Max Safe name characters
28
Where is license file located
in safe or program files
CPM services
cyberark password manager, cyberark central policy manager scanner (x86 directory)
CPM logs
CPM logs:
• Pm.log (all log messages)
• Om_error.log (only warning and error messages)
• Third party logs in third party folder
• History log files in history folder
CPM safes
psswordmanagershared (shared by all CPM)
passwordmanager_pending (shared by all CPM)
passwordManager
PasswordManage_ADInternal
PM_info, PM_Workspace
PVWA log location
%windir%\temp\PVWA (can be changed sing log folder param in web.config IIS)
PVWA Safes
PVWA config, PVWA privateuserpreg,s pvwareports, pvwatask definitions
PSM config file
, basic_psm.ini
PSM log for info and errors
psmconsole.log
PSM Log for recorder errors
sessionid.recorder.log
PSM connection client log
sessionid.connectionclient.log
PSM storage formulas
numsessions * time ession * recording bit rate + 20GB
Multiple retention time(days) by num sessions for vault
CPM configuration files
Used for usage accounts
Auto discovery tool
Linux uses CSV
Windows goes off AD
Password upload utility
Uses CSV file to upload accounts
PSMP example usage
vaultaccount@localaccount@targetip@psmip
PSMP config file
basic_psmpserver.conf
Component connection tool used to create them
AutoIT
PTA users
PTAUser,PTAAppUser,PSMPTAAppIsers
Export Vault Data Utility
exports data to txt or csv
8 Security fundamentals
Isolate and harden vault
Use 2FA
Restrict access to component servers
Limit privileges and points of administration
Protect sensitive accounts and encryption keys
Use secure protocols
Monitor logs
Create and test DR plam
Vault security standards
Backup/HA/DR
Monitor vault
Remote Admin
External storage - no
Virtualization of vault - no
Vault domain membership - no
Anti-virus - no
SSL LDAP port
Ratio of privileged accounts to normal?
3x1
Advanced core PAS
OPM/EPM for NIX/Windows and Domain Controller protection
Encryption process
Passwords -> files key -> Safe key -> Server key
Remote control agent uses port
9022
Vault logs for debug
Trace.d0 (debug file)
Vault logs
Dbparm.ini (config file. Require vault service restart)
Passparm.ini (password policy for users of the vault)
PARagent (remote contrl agent)
TSparm (configure physical disks used to store vault data)
ITAlog (main log file)
Trace.d0 (debug file)
Initial vault safes
notification engine, system, vault internal
Maximum number of objects in safe
20000
Max Safe name characters
28
Where is license file located
in safe or program files
CPM services
cyberark password manager, cyberark central policy manager scanner (x86 directory)
CPM logs
CPM logs:
• Pm.log (all log messages)
• Om_error.log (only warning and error messages)
• Third party logs in third party folder
• History log files in history folder
CPM safes
psswordmanagershared (shared by all CPM)
passwordmanager_pending (shared by all CPM)
passwordManager
PasswordManage_ADInternal
PM_info, PM_Workspace
PVWA log location
%windir%\temp\PVWA (can be changed sing log folder param in web.config IIS)
PVWA Safes
PVWA config, PVWA privateuserpreg,s pvwareports, pvwatask definitions
PSM config file
, basic_psm.ini
PSM log for info and errors
psmconsole.log
PSM Log for recorder errors
sessionid.recorder.log
PSM connection client log
sessionid.connectionclient.log
PSM storage formulas
numsessions * time ession * recording bit rate + 20GB
Multiple retention time(days) by num sessions for vault
CPM configuration files
Used for usage accounts
Auto discovery tool
Linux uses CSV
Windows goes off AD
Password upload utility
Uses CSV file to upload accounts
PSMP example usage
vaultaccount@localaccount@targetip@psmip
PSMP config file
basic_psmpserver.conf
Component connection tool used to create them
AutoIT
PTA users
PTAUser,PTAAppUser,PSMPTAAppIsers
Export Vault Data Utility
exports data to txt or csv
8 Security fundamentals
Isolate and harden vault
Use 2FA
Restrict access to component servers
Limit privileges and points of administration
Protect sensitive accounts and encryption keys
Use secure protocols
Monitor logs
Create and test DR plam
Vault security standards
Backup/HA/DR
Monitor vault
Remote Admin
External storage - no
Virtualization of vault - no
Vault domain membership - no
Anti-virus - no
SSL LDAP port
