Application Access Manager Flashcards

Which AAM component must be installed on the application server to retrieve credentials using the file-based method?

Answer: Credential Provider (CP)

The Credential Provider (CP) is installed locally on the application server and enables file-based credential retrieval.

What is the primary purpose of the CyberArk Application Identity Manager (AIM)?

Answer: Eliminate hardcoded credentials in applications

AIM eliminates hardcoded credentials by allowing applications to retrieve secrets dynamically from the Vault.

Which authentication method verifies an application's identity based on the executable file path and hash?

Answer: Path and hash authentication

Path and hash authentication ensures that only the specific, unmodified executable can request credentials.

In AAM, what does 'AllowedMachines' define in an application definition?

Answer: IP addresses or hostnames permitted to request credentials for that application

AllowedMachines restricts credential retrieval to specific IPs or hostnames associated with the registered application.

When an application uses the Central Credential Provider (CCP), how does it retrieve secrets?

Answer: Through a REST API call over HTTPS

CCP exposes a REST web service that applications call over HTTPS to retrieve credentials without a local agent.

Which Safe permission must an AAM application's Vault user have to retrieve an account's credentials?

Answer: Retrieve Accounts

The 'Retrieve Accounts' permission allows the AAM provider user to fetch the credential value from the Safe.

What happens when an AAM application definition has 'Business Owner Approval' enabled?

Answer: A human approver must authorize each credential request before it is fulfilled

Business Owner Approval introduces a workflow gate requiring manual authorization before the application receives its credential.