CAD CAD Audit & Compliance 2

Question 1

When configuring CyberArk to meet SOX compliance requirements, which control ensures that no single user can both request and approve privileged access?

Accepted Answer

Dual Control

Answer

Dual Control enforces separation of duties by requiring a separate authorizer to approve any privileged account checkout request.

Question 2

Which CyberArk report lists all Safe members and their assigned permissions, useful for access certification reviews?

Accepted Answer

Entitlement Report

Answer

The Entitlement Report details every Safe member and their permissions, enabling periodic access review and certification for compliance.

Question 3

In CyberArk, what is the purpose of the 'Access Keys for Accountability' feature during privileged session recording?

Accepted Answer

Ties each session recording to a specific authenticated user for accountability

Answer

Access Keys for Accountability links PSM recordings directly to the authenticated requester, ensuring clear attribution for audit trails.

Question 4

Which CyberArk PVWA report is specifically designed to show accounts whose passwords have not been changed in a user-defined number of days?

Accepted Answer

Non-Compliant Accounts Report

Answer

The Non-Compliant Accounts Report identifies accounts that have exceeded the allowed password age, flagging them for remediation.

Question 5

To comply with PCI-DSS requirements for privileged account monitoring, CyberArk PSM recordings should be stored for a minimum of how long?

Accepted Answer

1 year

Answer

PCI-DSS requires audit logs and session recordings for privileged users to be retained for at least one year, with three months immediately available.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD CAD Audit & Compliance 2