Privileged Session Manager Setup Flashcards
7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Privileged Session Manager Setup flashcards as text
What is a PSM Connection Component responsible for?
Answer: Defining how PSM connects to a specific target system type (e.g., RDP, SSH, Web)
A Connection Component defines the protocol, application, and parameters PSM uses to launch a session to a particular target system type.
Where are PSM session recordings stored by default after a privileged session ends?
Answer: In the CyberArk Vault as secure files linked to the account
By default, PSM uploads session recordings to the CyberArk Vault, where they are stored securely and linked to the relevant account.
Which PSM configuration parameter controls the maximum duration of an idle privileged session before automatic disconnection?
Answer: IdleTimeout
The IdleTimeout parameter (configured in PSM settings) specifies how many minutes of inactivity are allowed before PSM automatically disconnects the session.
When configuring a PSM platform in PVWA, which setting maps a platform to a specific Connection Component?
Answer: ConnectionComponent
The ConnectionComponent property in a platform definition tells PSM which connector to use when launching sessions for accounts in that platform.
What must be configured in the Vault to allow PSM to retrieve credentials for a target account on behalf of a user?
Answer: The PSMConnect account must be added to the Safe with Retrieve permission
PSMConnect must have Retrieve (and List) permission on the Safe that holds the target account so it can fetch the password at session time.
Which CyberArk feature allows a user to request a PSM session that must be approved by a manager before it is established?
Answer: Dual Control (Ticketing Integration)
Dual Control requires a second authorizer to approve an access request before PSM will initiate the privileged session.
In a high-availability PSM deployment, what is typically placed in front of multiple PSM servers to distribute session load?
Answer: Network Load Balancer (NLB) or Application Delivery Controller
A Network Load Balancer or ADC distributes incoming RDP/SSH connections across multiple PSM servers to provide redundancy and load distribution.