CAD Cheat Sheet 2026

The 30 highest-yield CAD facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What is the primary purpose of the CyberArk Digital Vault? → Secure and store privileged credentials
2. Which user permission is required to manage other user roles in CyberArk? → Manage Users
3. How are Vault activities typically audited? → Activity logs and audit reports
4. Which CyberArk component is responsible for recording and storing all audit logs generated by the Digital Vault? → Vault Audit Log
5. Which Master Policy rule, when enabled, instructs the CPM to periodically rotate account passwords on a scheduled basis? → Require periodic password change
6. A CAD professional encounters an unfamiliar situation while performing enterprise password vault policies duties. What is the most appropriate first action? → Consult relevant standards, guidelines, or a qualified supervisor before proceeding
7. What is the primary ethical obligation of a CAD professional when a conflict of interest arises during cyberark cloud entitlements activities? → Disclose the conflict to all relevant parties and recuse from the decision if necessary
8. Which of the following is a fundamental principle of cyberark architecture & components as it applies to CyberArk Defender Certification? → Systematic evaluation and adherence to established industry standards
9. In CyberArk, what file contains replication configuration parameters for the Disaster Recovery Vault, including the primary Vault address? → PADR.ini
10. Which setting can enforce session approval in CyberArk? → Dual control
11. What CyberArk feature allows auditors to watch a live or recorded privileged session without interrupting the active user? → Session Monitoring
12. Which component of CyberArk stores privileged credentials securely? → Digital Vault
13. A CAD professional encounters an unfamiliar situation while performing privileged threat analytics duties. What is the most appropriate first action? → Consult relevant standards, guidelines, or a qualified supervisor before proceeding
14. What is the effect of the 'Audit' permission in a safe? → View audit trail
15. What is the maximum recommended network latency between the primary CyberArk Vault and its DR Vault to ensure synchronous replication performance? → 20 ms
16. Which quality assurance method is most commonly applied in cyberark architecture & components to verify that CAD professional standards are being met? → Structured audits, peer reviews, and performance metrics aligned with industry benchmarks
17. In a CyberArk HA environment, which Vault component manages the distribution of requests across multiple Vault cluster nodes? → CyberArk Cluster Vault Manager (CVM)
18. Which of the following is a fundamental principle of privileged session manager setup as it applies to CyberArk Defender Certification? → Systematic evaluation and adherence to established industry standards
19. What is the primary ethical obligation of a CAD professional when a conflict of interest arises during privileged access management concepts activities? → Disclose the conflict to all relevant parties and recuse from the decision if necessary
20. A CAD professional encounters an unfamiliar situation while performing cyberark architecture & components duties. What is the most appropriate first action? → Consult relevant standards, guidelines, or a qualified supervisor before proceeding
21. Which CyberArk Master Policy setting helps ensure compliance by automatically disabling accounts that have not been used within a specified number of days? → Inactive Account Management
22. Which replication mode does CyberArk use by default between the primary Vault and the DR Vault? → Synchronous replication
23. A CAD professional encounters an unfamiliar situation while performing cyberark cloud entitlements duties. What is the most appropriate first action? → Consult relevant standards, guidelines, or a qualified supervisor before proceeding
24. What is the primary ethical obligation of a CAD professional when a conflict of interest arises during enterprise password vault policies activities? → Disclose the conflict to all relevant parties and recuse from the decision if necessary
25. In CyberArk, which backup method creates a point-in-time copy of the Vault data that can be used to restore a completely failed primary Vault? → Vault Backup Utility (PABackup)
26. Which CyberArk component provides the web interface for user access? → PVWA
27. Which CyberArk PVWA report is specifically designed to show accounts whose passwords have not been changed in a user-defined number of days? → Non-Compliant Accounts Report
28. Which quality assurance method is most commonly applied in application access manager to verify that CAD professional standards are being met? → Structured audits, peer reviews, and performance metrics aligned with industry benchmarks
29. What CyberArk mechanism ensures that audit records stored in the Vault cannot be deleted or modified by any user, including administrators? → Immutable Audit Trail
30. Which CyberArk feature allows the CPM to discover unmanaged privileged accounts across the network and queue them for onboarding into the Vault? → CPM Account Discovery (CPM Scanner)