Vault Management Flashcards
7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Vault Management flashcards as text
Which CyberArk Vault component is responsible for enforcing access control policies and logging all activity?
Answer: Digital Vault
The Digital Vault is the core component that enforces access control, encrypts stored credentials, and maintains an immutable audit log of all activity.
In CyberArk, what is the purpose of the Safe's 'Expiration Date' property?
Answer: It disables access to the Safe on the specified date
Setting an Expiration Date on a Safe disables all access to that Safe once the date is reached, preventing further use of stored credentials.
What is the minimum number of Master CD keys required to reconstruct the Vault Encryption Key during disaster recovery?
Answer: All provided Master CD keys
All Master CD keys issued during Vault initialization must be used together to reconstruct the Vault Encryption Key for disaster recovery.
Which Safe is used by CyberArk to store the Vault's own internal configuration and system accounts?
Answer: VaultInternal Safe
The VaultInternal Safe stores CyberArk's own system credentials and configuration data used internally by Vault services.
A CyberArk administrator needs to prevent a specific user from accessing a Safe even though that user is a member of a group that has Safe access. What is the correct approach?
Answer: Add the user to the Safe with no permissions
Adding a user directly to a Safe with zero permissions overrides inherited group-level permissions, effectively blocking that individual's access.
What does the CyberArk Vault 'dual control' workflow require before a password can be retrieved?
Answer: Approval from at least one authorized Safe Owner or approver
Dual control requires that one or more designated approvers authorize a password request before the requester can view or use the credential.
Which CyberArk Vault log file records all administrative operations performed on the Vault server itself?
Answer: vault.log
vault.log is the primary Vault server log that records operational events, errors, and administrative actions performed on the Vault service.