PAM Basics Flashcards
7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 PAM Basics flashcards as text
What is the role of a 'Master Policy' in CyberArk's PVWA?
Answer: A global baseline policy that governs all platforms unless overridden at the platform level
The Master Policy sets organization-wide defaults for access control, session management, and password management that platforms can selectively override.
Which of the following is an example of a non-human privileged identity that PAM solutions must protect?
Answer: A service account used by a scheduled task to connect to a database
Service accounts are non-human identities that often hold elevated privileges and must be vaulted and rotated by a PAM solution.
What does 'just-in-time (JIT) access' mean in the context of PAM?
Answer: Privileges are granted only when needed and revoked immediately after the task is complete
JIT access eliminates standing privileges by provisioning elevated access only for the duration of an approved task window.
In CyberArk's architecture, where are privileged credentials encrypted and stored?
Answer: Inside the Digital Vault server
The Digital Vault server is the hardened component that stores and encrypts all privileged credentials; no other component holds the actual secrets.
Which CyberArk feature would you use to limit a privileged session to a specific allowed list of commands on a Unix server?
Answer: Privileged Session Manager (PSM) with session restrictions / command filtering
PSM can enforce command-level restrictions during SSH sessions, blocking or alerting on unauthorized commands.
What is credential vaulting in PAM?
Answer: Storing privileged credentials in a secure, encrypted repository with access controls
Credential vaulting centralizes privileged account passwords in an encrypted, access-controlled vault so they are never exposed in plaintext.
Which of the following best describes 'privileged access workstations (PAWs)' in a PAM strategy?
Answer: Dedicated, hardened workstations used exclusively for privileged administrative tasks
PAWs are isolated, hardened devices used only for privileged tasks to reduce the attack surface when performing administrative activities.