CAD Application Access Manager 2

Question 1

Which AAM component must be installed on the application server to retrieve credentials using the file-based method?

Accepted Answer

Credential Provider (CP)

Answer

The Credential Provider (CP) is installed locally on the application server and enables file-based credential retrieval.

Question 2

What is the primary purpose of the CyberArk Application Identity Manager (AIM)?

Accepted Answer

Eliminate hardcoded credentials in applications

Answer

AIM eliminates hardcoded credentials by allowing applications to retrieve secrets dynamically from the Vault.

Question 3

Which authentication method verifies an application's identity based on the executable file path and hash?

Accepted Answer

Path and hash authentication

Answer

Path and hash authentication ensures that only the specific, unmodified executable can request credentials.

Question 4

In AAM, what does 'AllowedMachines' define in an application definition?

Accepted Answer

IP addresses or hostnames permitted to request credentials for that application

Answer

AllowedMachines restricts credential retrieval to specific IPs or hostnames associated with the registered application.

Question 5

When an application uses the Central Credential Provider (CCP), how does it retrieve secrets?

Accepted Answer

Through a REST API call over HTTPS

Answer

CCP exposes a REST web service that applications call over HTTPS to retrieve credentials without a local agent.

(CAD) CyberArk Defender Certification Practice Test