CyberArk Defender and Sentry Level combined questions
and answers 2023 with complete solution
__________ Report provides information about all the accounts in the System.
Privileged Accounts Inventory Report
__________ Report is for each user and shows Accounts and Safes what they can
access in the System.
Entitlement Report
File for:
- main configuration file of the Vault.
- any change requests requires a restart of the Vault Service.
DBParm.ini
PTA Statistics Log Name
Statistics.log
Within the Vault, each password is encrypted by?
Its own unique key
Good use case for Disaster Recovery module
Offsite replication is required
What would be a good use case for the Replicate Module?
Integration with an Enterprise Backup Solution is required
PTA Utility Log Name
Diamond-Utility.log
What account automatically onboards unmanaged privileged account?
PTAUser
Provides information about all the privileged accounts in the system required
permissions:
- list accounts
- view safe members
Privileged Accounts Inventory Report
The Vault Internal Safe contains all of the configuration for the Vault?
False
Who is in the only user that can edit the Directory Mappings?
Built in Administrator
What is Applocker used for?
Limits the applications that may be raw on the PSM machine
Can you set the Cluster Vault Debug Level Dynamically without restarting the
Cluster Vault?
Yes
Can the PVWA be load balanced?
Yes
What happens when multiple discoveries of accounts are on the same domain
accounts?
Multiple discoveries will synchronize all the shared discovered accounts
Purpose and permissions needed for the Activity Log Report
,- All audit information in the Vault
- View audit and audit users
File for:
- configure Remote Control Agent in the Vault
- SNTP Configuration
PARagent.ini
What is the purpose of the Immediate Interval setting in the CPM Policy?
To control how often the CPM looks for User Initiated CPM work
At what point is a transparent user provisioned in the Vault?
The first time the user logs in
HA, DR, and Replication are mutually exclusive and cannot be used in the same
environment.
False
Password Upload Utility must be installed on the CPM server.
False
File for:
- Configuring Password Policy for users of the Vault
Passparm.ini
Which report could show all audit data in the Vault?
Activity Log
What is the primary reason for installing more than one active CPM?
Installing CPMS in multiple sites prevents complex rules to manage devices at remote
sites
Through which component do you configure the CPM?
PVWA
Through which component do you manage internal CyberArk users?
PrivateArk Client
Which file would you modify to configure your Vault server to forward Activity
Logs to a a SIEM or SYSLOG Server?
DBParm.ini
Which file configures password policy for Vault Users?
Passparm.ini
What does the Export Vault Data Utility do?
Exports the data from the Vault to .txt or .csu files
What file would you edit to adjust the LDAP Synchronization Parameters?
DBParm.ini
__________ Report provides information about the Application ID's in the System.
Application Inventory or AIM Report
Domain Accounts are categorized as either __________ or __________?
Privileged or non-privileged
Vault authorizations may be granted to __________
LDAP Users and Vault Users
What are the two types of linked accounts?
Logon and reconcile
How do you install the Password Upload Utility?
This doesn't require installation, the files needed to run are in the folder
, You can successfully manage passwords in the alpha.cyberark.com domain but
you can not manage passwords in beta.cyberark.com, You receive "Network path
not found." What should you check first?
That the CPM can successfully resolve addresses in the beta.cyberark.com
Users may be created in the PVWA.
False, accounts may be manually onboarded but users must be created in PrivateArk
Safe permissions may be applied to users and groups.
True
Can the PVWA be automatically load balanced?
No
A SIEM Integration allows you to forward ITALog records to a monitoring
solution.
False
A logon account can be specified in the Master Policy.
False
__________ Report is used to show the CPM status for each account.
Privileged Accounts Compliance Status Report
The Vault Internal Safe contains all of the configurations for the Vault.
False
How many different reports may be generated by components?
10
In the Discovery Process, what determines if a domain account is privileged?
The account is a member of any local administrators group
Who are the Built-In Vault users?
Administrator, Auditor, Backup, Batch, DR, Notification Engine, Operator, and Master
How does one reverse object level access control?
You can't
What local group is created during the PSM Installation?
PSM Shadow Users
What permissions do you need access to access the reports tab?
Auditor
The PTA can be configured to terminate and suspend sessions.
True, though typically only in the case of high risk activity
Platform Settings are applied to __________?
Individual Accounts
What are the secure options for storing the contents of the operator CD, while
still being able to allows the contents of the Vault during a planned restart?
- Store the CD in a physical safe and mount the CD every time maintenance is
performed
- Copy the contents of the CD to a folder on the Vault server and secure it with NTFS
permissions
- Store the server key in a HSM
Can two vaults be load balanced with external load balancer?
No
What file do you figure to set the Radius server?
DBParm.ini
and answers 2023 with complete solution
__________ Report provides information about all the accounts in the System.
Privileged Accounts Inventory Report
__________ Report is for each user and shows Accounts and Safes what they can
access in the System.
Entitlement Report
File for:
- main configuration file of the Vault.
- any change requests requires a restart of the Vault Service.
DBParm.ini
PTA Statistics Log Name
Statistics.log
Within the Vault, each password is encrypted by?
Its own unique key
Good use case for Disaster Recovery module
Offsite replication is required
What would be a good use case for the Replicate Module?
Integration with an Enterprise Backup Solution is required
PTA Utility Log Name
Diamond-Utility.log
What account automatically onboards unmanaged privileged account?
PTAUser
Provides information about all the privileged accounts in the system required
permissions:
- list accounts
- view safe members
Privileged Accounts Inventory Report
The Vault Internal Safe contains all of the configuration for the Vault?
False
Who is in the only user that can edit the Directory Mappings?
Built in Administrator
What is Applocker used for?
Limits the applications that may be raw on the PSM machine
Can you set the Cluster Vault Debug Level Dynamically without restarting the
Cluster Vault?
Yes
Can the PVWA be load balanced?
Yes
What happens when multiple discoveries of accounts are on the same domain
accounts?
Multiple discoveries will synchronize all the shared discovered accounts
Purpose and permissions needed for the Activity Log Report
,- All audit information in the Vault
- View audit and audit users
File for:
- configure Remote Control Agent in the Vault
- SNTP Configuration
PARagent.ini
What is the purpose of the Immediate Interval setting in the CPM Policy?
To control how often the CPM looks for User Initiated CPM work
At what point is a transparent user provisioned in the Vault?
The first time the user logs in
HA, DR, and Replication are mutually exclusive and cannot be used in the same
environment.
False
Password Upload Utility must be installed on the CPM server.
False
File for:
- Configuring Password Policy for users of the Vault
Passparm.ini
Which report could show all audit data in the Vault?
Activity Log
What is the primary reason for installing more than one active CPM?
Installing CPMS in multiple sites prevents complex rules to manage devices at remote
sites
Through which component do you configure the CPM?
PVWA
Through which component do you manage internal CyberArk users?
PrivateArk Client
Which file would you modify to configure your Vault server to forward Activity
Logs to a a SIEM or SYSLOG Server?
DBParm.ini
Which file configures password policy for Vault Users?
Passparm.ini
What does the Export Vault Data Utility do?
Exports the data from the Vault to .txt or .csu files
What file would you edit to adjust the LDAP Synchronization Parameters?
DBParm.ini
__________ Report provides information about the Application ID's in the System.
Application Inventory or AIM Report
Domain Accounts are categorized as either __________ or __________?
Privileged or non-privileged
Vault authorizations may be granted to __________
LDAP Users and Vault Users
What are the two types of linked accounts?
Logon and reconcile
How do you install the Password Upload Utility?
This doesn't require installation, the files needed to run are in the folder
, You can successfully manage passwords in the alpha.cyberark.com domain but
you can not manage passwords in beta.cyberark.com, You receive "Network path
not found." What should you check first?
That the CPM can successfully resolve addresses in the beta.cyberark.com
Users may be created in the PVWA.
False, accounts may be manually onboarded but users must be created in PrivateArk
Safe permissions may be applied to users and groups.
True
Can the PVWA be automatically load balanced?
No
A SIEM Integration allows you to forward ITALog records to a monitoring
solution.
False
A logon account can be specified in the Master Policy.
False
__________ Report is used to show the CPM status for each account.
Privileged Accounts Compliance Status Report
The Vault Internal Safe contains all of the configurations for the Vault.
False
How many different reports may be generated by components?
10
In the Discovery Process, what determines if a domain account is privileged?
The account is a member of any local administrators group
Who are the Built-In Vault users?
Administrator, Auditor, Backup, Batch, DR, Notification Engine, Operator, and Master
How does one reverse object level access control?
You can't
What local group is created during the PSM Installation?
PSM Shadow Users
What permissions do you need access to access the reports tab?
Auditor
The PTA can be configured to terminate and suspend sessions.
True, though typically only in the case of high risk activity
Platform Settings are applied to __________?
Individual Accounts
What are the secure options for storing the contents of the operator CD, while
still being able to allows the contents of the Vault during a planned restart?
- Store the CD in a physical safe and mount the CD every time maintenance is
performed
- Copy the contents of the CD to a folder on the Vault server and secure it with NTFS
permissions
- Store the server key in a HSM
Can two vaults be load balanced with external load balancer?
No
What file do you figure to set the Radius server?
DBParm.ini
