CAD Access Controls 2

Question 1

Which CyberArk component enforces the dual control workflow requiring a second approver before a password can be retrieved?

Accepted Answer

PVWA

Answer

The Password Vault Web Access (PVWA) enforces dual control workflows, requiring a designated approver to confirm a request before credentials are released.

Question 2

In CyberArk, what is the purpose of the 'Exclusive Access' safe setting?

Accepted Answer

It prevents concurrent password retrievals, locking the account to a single active session

Answer

Exclusive Access ensures only one user can check out and use a credential at a time, preventing concurrent use of shared privileged accounts.

Question 3

A user requests access to a Safe but their request remains in 'Pending' status. What is the most likely cause?

Accepted Answer

Dual control requires an approver to confirm the access request

Answer

A pending request under dual control means no designated approver has yet confirmed the request within the configured approval workflow.

Question 4

Which Safe member permission allows a user to see the list of accounts in a Safe but NOT retrieve their passwords?

Accepted Answer

List accounts

Answer

The 'List accounts' permission lets users see account names within a Safe without granting them the ability to retrieve the actual credentials.

Question 5

When configuring time-based access in CyberArk, where are the allowed access time windows defined?

Accepted Answer

In the Master Policy under 'Privileged Access Workflows'

Answer

Time-based access restrictions are configured within the Master Policy's Privileged Access Workflows section, defining when users are permitted to retrieve credentials.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Access Controls 2