Setup Flashcards
7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Setup flashcards as text
Which CyberArk service is responsible for monitoring and verifying that managed account passwords comply with defined policies?
Answer: Central Policy Manager (CPM)
The CPM is responsible for verifying, changing, and reconciling passwords on target systems according to the platform policies defined in CyberArk.
During CyberArk Vault hardening post-installation, which action is recommended to reduce the attack surface?
Answer: Disable all unnecessary services and restrict OS-level access to the Vault server
Vault hardening involves disabling unnecessary OS services, limiting local logon access, and applying strict firewall rules to minimize the Vault's attack surface.
What is the function of the 'PARagent' service on a CyberArk Vault server?
Answer: It is the replication agent that copies Vault data to the DR Vault
PARagent is the replication service that continuously synchronizes Vault data from the primary Vault to Disaster Recovery Vault replicas.
When first configuring platform policies in CyberArk, where are these policies defined and managed?
Answer: In the PVWA under Administration > Platform Management
Platform policies are created and managed in the PVWA under Administration > Platform Management, where password rules, verification schedules, and plugin settings are configured.
A new CyberArk environment requires accounts to be automatically onboarded from Active Directory. Which feature handles this during setup?
Answer: Pending Accounts via the Discovery and Audit (DNA) tool or onboarding rules in PVWA
Auto-onboarding uses discovery results (from DNA or network scanners) combined with onboarding rules configured in PVWA to automatically add detected accounts to the Vault.
Which CyberArk setup component requires the installation of a 'connector' or 'plugin' specific to each target platform type (e.g., Windows, Unix, Oracle)?
Answer: CPM
The CPM uses platform-specific plugins (connectors) to communicate with and manage passwords on different target system types such as Windows, Unix, and databases.
After completing CyberArk installation, what is the recommended first step for validating the setup is functioning correctly?
Answer: Add a test account to a Safe and verify the CPM can rotate its password successfully
Adding a test account and confirming the CPM rotates its password validates that the Vault, PVWA, and CPM are all properly connected and operational.