CyberArk Level 3 – Sentry

The CyberArk Level 3 – Sentry certification demonstrates your expertise with the tools involved in the deployment, installation, and configuration of a fundamental structure of the Cyberark PAS solution. The CyberArk certification validates your product expertise and opens the ways for additional professional opportunities.
Target Audience
The CyberArk Level 3 – Sentry certification is designed for the candidates, who will be required to deploy the CyberArk privileged security solution. Vault/Administration/ IT personnel who would like to increase their knowledge of the cyber PAS solution.
Recommendation of Knowledge/ Prerequisites
The prerequisites for the CyberArk Level 3 – Sentry exam is that the candidate must have acquired the Defender Certification: Level 2: Defender.
Exam Details
Exam Name CyberArk Sentry Certification | Exam Duration 90 mins |
Number of Questions 65 Questions | Exam Format Multiple Choice |
Pass Score 70% and above | Exam Fee $200 USD |

Course Outline
The CyberArk Level 3 – Sentry exam covers the following domains.
Updated Course Outline for the CyberArk Level 3 Sentry Exam.
Deploy the Vault
- Identify and describe the steps to migrate the server key to an HSM
- Identify and describe the steps to complete a post-install hardening
- Identify and describe the components and steps to complete a Vault installation
- Describe how to prepare a Windows server for Vault installation
- Describe how to register a primary vault in AWS using AMIs
- Describe how to register a primary vault in Azure using the CyberArk image
Deploy the Password Vault Web Access (PVWA)
- Identify and describe the steps to install the first and additional PVWAs
- Evaluate and scope a customer environment to determine the appropriate number of PVWAs and their placement within the network
- Describe the process to correctly harden a PVWA server
- Describe various PVWA load balancing options
- Prepare a Windows server for PVWA installation
Deploy the Central Policy Manager (CPM)
- Identify and describe the steps to correctly harden a CPM server
- Identify and describe the steps required to prepare a Windows server for CPM installation
- Identify and describe the steps to install the first and additional CPMs
- Identify and describe the steps to rename a CPM
- Evaluate and scope a customer environment to determine the number of CPMs required and their placement within the network
- Identify and describe Fault Tolerant Architecture components
- Determine the quantities and locations of components needed to provide a fault tolerant architecture to meet customer needs
- Identify and describe distributed architecture components
- Determine the quantities and locations of components needed to provide a distributed architecture to meet customer needs
Deploy the Privileged Session Manager (PSM)
- Identify and describe the steps to install the first and additional PSMs
- Identify and describe preparation considerations for PSM deployment
- Evaluate and scope a customer environment to calculate the amount of storage that should be available to the PSMs for PSM recordings
- Evaluate and scope a customer environment to calculate the amount of storage that should be available to the Vault and PAReplicate for PSM recordings
- Evaluate and scope a customer environment to determine the appropriate number of PSMs and their placement within the network
- Identify and describe the steps to prepare a Windows server for PSM installation
- Describe post-installation processes
- Identify and describe the steps to complete an HTML5 Gateway installation
- Identify and describe the steps to prepare a UNIX server for HTML5 Gateway installation
- Describe various PSM load-balancing options
- Describe how to correctly harden a PSM server
Deploy the PSM For SSH
- Identify and describe the steps to install the first and additional PSMs for SSH
- Describe how to configure usrmng accounts
- Describe the process to correctly harden a PSM for SSH server
- Describe how to prepare a UNIX server for PSM for SSH installation
Configure Integrations
- Configure authentication methods
- Describe the steps required to combine a Vault and a PVWA authentication method to create two-factor authentication
- Describe how to configure PKI authentication
- Describe how to configure RADIUS authentication
- Describe how to configure SAML authentication
- Identify and describe the components that work with each authentication method
- Describe how to generate a custom connection component using the PGU
- Perform integration tasks, including integrating with NTP, SMTP, SNMP, LDAP, and Syslog/SIEM
Performance tune the solution
- Identify and describe the steps to convert a platform from PMTerminal to TPC
- Identify and describe how to correctly configure Interval and concurrent settings
- Identify and describe how to correctly configure the Allowed Safes parameter
- Evaluate and scope a customer environment to correctly size the servers to meet customer needs
Install and deploy on a public cloud
- Identify best practices agnostic to public cloud deployments
- Identify and describe different cloud architectures
- Describe key management considerations in a public cloud
- Identify and describe various cost reduction strategies when deploying into a public cloud
CyberArk Level 3 Study Guide Sentry Exam
It is essential to gain confidence before appearing for any exam, and confidence comes through the practice tests. Working hard and investing efforts in the right direction is significant at the same time. Being well aware of the question and format takes you a little near to passing the examination. This preparation guide will guide you to take the right route, along with highlighting the necessary preparation resources.

Learning Resource 1 – Official Training
CyberArk offers a wide range of training options and professional certifications level that helps you and your organization leverage the CyberArk solutions. The official training for the CyberArk Level 3 – Sentry Exam is the CyberArk Privileged Access Security (PAS) Install and Configure training. Through the CyberArk Level 3 Sentry training candidates will acquire expertise in the design, installation, and configuration of the CyberArk Privileged Account Security Solution.
Learning Resource 2 – Online Community
A good way to gain knowledge and know where you stand in any competition is to join online forums and study groups. Here, you will be able to make equations with other competitors and keep yourself motivated. Not only, will this be beneficial in the CyberArk Level 3 – Sentry exam prep, because of the exposure it provides, but you will also be able to get all your questions and doubts cleared here.
Practice Tests
The more you practice, the more you will excel. Several practice tests/ mock tests/ online series are available for free, on the internet. Solving CyberArk Level 3 Sentry practice exam tests will not only make you familiar with the exam environment, and increase your confidence, but will also help you identify the areas where you lack and need to pay special attention to. But what’s important here is that you go for an authentic and updated CyberArk Level 3 Sentry practice exam test.