Scribd
Upload
224 views4 pages

Sentry Study Guide - 2022

Uploaded by

Marcel Friesen
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
224 views4 pages

Sentry Study Guide - 2022

Uploaded by

Marcel Friesen
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

CyberArk Sentry Certification

Study Guide
Exam Objectives
The CyberArk Sentry Certification tests for the necessary expertise and technical skills to
deploy, install, and configure the CyberArk Privileged Access Management solution. It is
intended to certify an candidate’s competence to fill one of the following roles within a
Privileged Access Managment Program.

CyberArk Subject Matter Expert


The CyberArk SME designs controls which will be implemented with CyberArk and acts as a
liaison to user groups.

CyberArk Engineer
The CyberArk Engineer installs and manages non-production CyberArk environments, tests
new features and creates internal documentation.

Exam Content
The CyberArk Sentry Certification tests examanees ability to form the following tasks in eight
knowledge domains. Only functions of the Core PAM solution are included.

Deploy the Vault


 Identify and describe the steps to migrate the server key to an HSM
 Identify and describe the steps to complete a post-install hardening
 Identify and describe the components and steps to complete a Vault installation
 Describe how to prepare a Windows server for Vault installation
 Describe how to register a primary vault in AWS using AMIs
 Describe how to register a primary vault in Azure using the CyberArk image

Deploy the Password Vault Web Access (PVWA)


 Identify and describe the steps to install the first and additional PVWAs
 Evaluate and scope a customer environment todetermine the appropriate number
of PVWAs and their placement within the network
 Describe the process to correctly harden a PVWA server
 Describe various PVWA load balancing options
 Prepare a Windows server for PVWA installation

Deploy the Central Policy Manager (CPM)


 Identify and describe the steps to correctly harden a CPM server
 Identify and describe the steps required to prepare a Windows server for CPM
installation
 Identify and describe the steps to install the first and additional CPMs
 Identify and describe the steps to rename a CPM

CyberArk Sentry Certification Study Guide 2


© Cyber-Ark Software Ltd. | cyberark.com
 Evaluate and scope a customer environment to determine the number of CPMs
required and their placement within the network
 Identify and describe Fault Tolerant Architecture components
 Determine the quantities and locations of components needed to provide a fault
tolerant architecture to meet customer needs
 Identify and describe distributed architecture components
 Determine the quantities and locations of components needed to provide a
distributed architecture to meet customer needs

Deploy the Privileged Session Manager (PSM)


 Identify and describe the steps to install the first and additional PSMs
 Identify and describe preparation considerations for PSM deployment
 Evaluate and scope a customer environment to calculate the amount of storage that
should be available to the PSMs for PSM recordings
 Evaluate and scope a customer environment to calculate the amount of storage that
should be available to the Vault and PAReplicate for PSM recordings
 Evaluate and scope a customer environment to determine the appropriate number
of PSMs and their placement withi the network
 Identify and describe the steps to prepare a Windows server for PSM installation
 Describe post-installation processes
 Identify and describe the steps to complete an HTML5 Gateway installation
 Identify and describe the steps to prepare a UNIX server for HTML5 Gateway
installation
 Describe various PSM load-balancing options
 Describe how to correctly harden a PSM server

Deploy the PSM For SSH


 Identify and describe the steps to install the first and additional PSMs for SSH
 Describe how to configure usrmng accounts
 Describe the process to correctly harden a PSM for SSH server
 Describe how to prepare a UNIX server for PSM for SSH installation

Configure Integrations
 Configure authentication methods
 Describe the steps required to combine a Vault and a PVWA authentication method
to create two-factor authentication
 Describe how to configure PKI authentication
 Describe how to configure RADIUS authentication
 Describe how to configure SAML authentication
 Identify and describe the components that work with each authentication method
 Describe how to generate a custom connection component using the PGU

CyberArk Sentry Certification Study Guide 3


© Cyber-Ark Software Ltd. | cyberark.com
 Perform integration tasks, including integrating with NTP, SMTP, SNMP, LDAP, and
Syslog/SIEM

Performance tune the solution


 Identify and describe the steps to convert a platform from PMTerminal to TPC
 Identify and describe how to correctly configure Interval and concurrent settings
 Identify and describe how to correctly configure the Allowed Safes parameter
 Evaluate and scope a customer environment to correctly size the servers to meet
customer needs

Install and deploy on a public cloud


 Identify best practices agnostic to public cloud deployments
 Identify and describe different cloud architectures
 Describe key management considerations in a public cloud
 Identify and describe various cost reduction strategies when deploying into a public
cloud

Study Resources
CyberArk provides a number of resources to prepare for the Sentry Exam

Instructor Led Courses


CyberArk Privileged Account Management Install and Configure

Free eLearning
HTML5 Based Remote Access

External Storage of PSM Recordings

Documentation
CyberArk Privileged Access Solution Installation Guide

CyberArk Sentry Certification Study Guide 4


© Cyber-Ark Software Ltd. | cyberark.com

You might also like