Access Controls Flashcards
7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Access Controls flashcards as text
Which CyberArk component enforces the dual control workflow requiring a second approver before a password can be retrieved?
Answer: PVWA
The Password Vault Web Access (PVWA) enforces dual control workflows, requiring a designated approver to confirm a request before credentials are released.
In CyberArk, what is the purpose of the 'Exclusive Access' safe setting?
Answer: It prevents concurrent password retrievals, locking the account to a single active session
Exclusive Access ensures only one user can check out and use a credential at a time, preventing concurrent use of shared privileged accounts.
A user requests access to a Safe but their request remains in 'Pending' status. What is the most likely cause?
Answer: Dual control requires an approver to confirm the access request
A pending request under dual control means no designated approver has yet confirmed the request within the configured approval workflow.
Which Safe member permission allows a user to see the list of accounts in a Safe but NOT retrieve their passwords?
Answer: List accounts
The 'List accounts' permission lets users see account names within a Safe without granting them the ability to retrieve the actual credentials.
When configuring time-based access in CyberArk, where are the allowed access time windows defined?
Answer: In the Master Policy under 'Privileged Access Workflows'
Time-based access restrictions are configured within the Master Policy's Privileged Access Workflows section, defining when users are permitted to retrieve credentials.
What happens to an exclusive account checkout if the user's session times out before they manually check it back in?
Answer: The account is automatically released after the configured checkout duration expires
CyberArk automatically releases an exclusive checkout after the configured maximum checkout duration, preventing accounts from being indefinitely locked.
Which of the following best describes the 'Access Safe without confirmation' permission in CyberArk?
Answer: Allows the user to retrieve credentials without triggering the dual control approval workflow
The 'Access Safe without confirmation' permission exempts specific users from the dual control workflow, letting them retrieve credentials immediately.