Digital Vault Server Administration Flashcards
7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Digital Vault Server Administration flashcards as text
Which CyberArk component is responsible for sending email notifications when Vault events occur?
Answer: ENE (Event Notification Engine)
The ENE (Event Notification Engine) monitors Vault activity and sends configurable email alerts when defined events or thresholds are triggered.
What type of encryption does the CyberArk Digital Vault use to protect stored passwords at rest?
Answer: AES-256 symmetric encryption with unique keys per safe
CyberArk uses AES-256 encryption with unique encryption keys generated per safe, providing strong data-at-rest protection.
In the CyberArk Vault, what is a 'Safe Owner' permission that allows a user to add other members to a safe?
Answer: Manage Safe Members
The 'Manage Safe Members' permission allows a safe owner to add, remove, or modify the permissions of other members within that safe.
Which Vault configuration parameter controls how long audit logs are retained before automatic deletion?
Answer: LogsHistoryRetentionPeriod
The LogsHistoryRetentionPeriod parameter in DBParm.ini defines the number of days that audit and activity logs are retained by the Vault.
After restoring a Digital Vault from backup, which action must be taken first before bringing the Vault online?
Answer: Perform a Vault integrity check using CAVaultManager.exe
After a restore, running a Vault integrity check with CAVaultManager.exe verifies database consistency before the Vault is put back into production use.
What is the role of the 'Master' user account in the CyberArk Digital Vault?
Answer: A built-in Vault administrator with the highest privilege level used for initial setup and emergency access
The Master user is a built-in, highest-privilege Vault administrator used for initial Vault configuration and emergency situations where other admin access is unavailable.
How does CyberArk protect the Digital Vault against unauthorized physical access to the server's storage?
Answer: Files are stored in a proprietary encrypted format readable only by the Vault engine
CyberArk stores all Vault data in a proprietary encrypted file format that cannot be read without the Vault engine and its encryption keys, even with direct server access.