Practice Test Geeks(CAD) Certified Computer-Aided Design Specialist Practice Test
← All CAD Flashcard Decks

Enterprise Password Vault Policies Flashcards

7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Enterprise Password Vault Policies flashcards as text

  1. In CyberArk EPV, what does enabling 'Require dual control password access approval' in the Master Policy accomplish?

    Answer: Requires two approvers before a password can be retrieved

    Dual-control approval requires at least two authorized users to approve a password request before it can be checked out.

  2. Which CyberArk policy exception allows a specific account to bypass the global Master Policy rotation interval?

    Answer: Account-level override via account properties

    Account-level overrides in the account's properties can override platform defaults (and Master Policy exceptions) for individual accounts.

  3. A CyberArk administrator wants to ensure that service accounts are NEVER automatically changed by the CPM. Which platform setting achieves this?

    Answer: Set ChangePassword to 'No'

    Setting the platform's ChangePassword property to 'No' instructs the CPM to skip automatic password rotation for accounts under that platform.

  4. What is the effect of setting 'Enforce check-in/check-out exclusive access' in a CyberArk Safe's Master Policy?

    Answer: Locks the password so only one user can hold it at a time

    Exclusive access check-in/check-out ensures only one user holds a given account credential at any moment, preventing simultaneous use.

  5. In which CyberArk configuration file are the default platform policy parameters defined for new platforms?

    Answer: PVConfiguration.xml

    PVConfiguration.xml contains global Vault configuration settings, while individual platform XML files define their own parameters inheriting from platform defaults.

  6. A security policy mandates that all password retrievals require a ticket number from the ITSM system. Which CyberArk feature enforces this?

    Answer: Ticketing system integration with reason requirement

    CyberArk's ticketing system integration (ServiceNow, Remedy, etc.) can mandate a valid ticket number before granting password access.

  7. Which EPV policy setting defines the maximum number of minutes a password checkout session may last before the account is automatically checked back in?

    Answer: MaxCheckoutDuration

    MaxCheckoutDuration sets an upper limit on how long a user may hold an exclusive checkout before the system auto-checks it back in.