CAD Audit & Compliance Flashcards

When configuring CyberArk to meet SOX compliance requirements, which control ensures that no single user can both request and approve privileged access?

Answer: Dual Control

Dual Control enforces separation of duties by requiring a separate authorizer to approve any privileged account checkout request.

Which CyberArk report lists all Safe members and their assigned permissions, useful for access certification reviews?

Answer: Entitlement Report

The Entitlement Report details every Safe member and their permissions, enabling periodic access review and certification for compliance.

In CyberArk, what is the purpose of the 'Access Keys for Accountability' feature during privileged session recording?

Answer: Ties each session recording to a specific authenticated user for accountability

Access Keys for Accountability links PSM recordings directly to the authenticated requester, ensuring clear attribution for audit trails.

Which CyberArk PVWA report is specifically designed to show accounts whose passwords have not been changed in a user-defined number of days?

Answer: Non-Compliant Accounts Report

The Non-Compliant Accounts Report identifies accounts that have exceeded the allowed password age, flagging them for remediation.

To comply with PCI-DSS requirements for privileged account monitoring, CyberArk PSM recordings should be stored for a minimum of how long?

Answer: 1 year

PCI-DSS requires audit logs and session recordings for privileged users to be retained for at least one year, with three months immediately available.

Which CyberArk feature generates a SYSLOG-format stream of vault audit events that can be forwarded to a SIEM platform?

Answer: SYSLOG Integration via Vault Parameters

CyberArk Vault supports SYSLOG integration configured via Vault parameters to forward audit events in real time to external SIEM tools.