CyberArk Architecture & Components Flashcards

Which CyberArk component is responsible for storing and managing privileged account credentials in an encrypted vault?

Answer: Digital Vault

The Digital Vault (Enterprise Password Vault) is the core encrypted repository that stores and protects privileged credentials.

The CyberArk PVWA (Password Vault Web Access) communicates with the Vault Server over which default port?

Answer: 1858

CyberArk Vault communication uses TCP port 1858 (the proprietary Vault protocol) by default.

In a CyberArk high-availability deployment, what is the role of the Disaster Recovery (DR) Vault?

Answer: It acts as a passive replica that can be promoted if the primary fails

The DR Vault is a passive standby that replicates data from the primary Vault and can be promoted to primary during a failover event.

Which CyberArk component manages the automatic rotation of passwords according to platform policies?

Answer: CPM (Central Policy Manager)

The CPM automates credential rotation, verification, and reconciliation based on the policies defined for each platform.

What is the purpose of the CyberArk Vault's 'Safe' object?

Answer: A logical container that groups accounts and controls access permissions

A Safe is the fundamental access-control boundary in the Vault, grouping related accounts and defining who can perform which operations on them.

Which CyberArk component provides real-time monitoring, session recording, and isolation of privileged sessions?

Answer: PSM

The Privileged Session Manager (PSM) acts as a jump server, recording and isolating RDP, SSH, and other privileged sessions in real time.

In CyberArk architecture, what does the term 'Master Policy' refer to?

Answer: A top-level policy in PVWA that sets defaults for all platforms and Safes

The Master Policy is the global policy layer in PVWA that defines baseline access and compliance rules inherited by all platforms unless overridden.