CAD Application Access Manager 3

Question 1

Which CyberArk component serves as the authentication broker when using the Central Credential Provider?

Accepted Answer

CCP IIS Web Service

Answer

The CCP is deployed as an IIS-hosted web service that authenticates applications and proxies credential requests to the Vault.

Question 2

In CyberArk AAM, what does 'OS User' authentication rely on to verify an application's identity?

Accepted Answer

The operating system account running the application process

Answer

OS User authentication validates the Windows or Unix account under which the requesting process is executing.

Question 3

An application is registered in CyberArk AAM with three authentication methods: IP, OS User, and Path. How many methods must match for the request to succeed?

Accepted Answer

All three must match

Answer

By default, when multiple authentication methods are configured, ALL must be satisfied for the application to receive credentials.

Question 4

What is the role of the 'AppProviderUser' in the CyberArk AAM architecture?

Accepted Answer

The Vault account used by the CP/CCP service to authenticate to the Vault on behalf of applications

Answer

AppProviderUser is the Vault identity that the AAM provider uses to authenticate and perform retrievals on behalf of registered applications.

Question 5

Which file on the Credential Provider server stores its configuration, including Vault address and authentication details?

Accepted Answer

appProvider.ini

Answer

The appProvider.ini file contains the CP's configuration including the Vault IP and authentication parameters.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Application Access Manager 3