CAD CyberArk Architecture & Components 2

Question 1

Which CyberArk component is responsible for storing and managing privileged account credentials in an encrypted vault?

Accepted Answer

Digital Vault

Answer

The Digital Vault (Enterprise Password Vault) is the core encrypted repository that stores and protects privileged credentials.

Question 2

The CyberArk PVWA (Password Vault Web Access) communicates with the Vault Server over which default port?

Accepted Answer

1858

Answer

CyberArk Vault communication uses TCP port 1858 (the proprietary Vault protocol) by default.

Question 3

In a CyberArk high-availability deployment, what is the role of the Disaster Recovery (DR) Vault?

Accepted Answer

It acts as a passive replica that can be promoted if the primary fails

Answer

The DR Vault is a passive standby that replicates data from the primary Vault and can be promoted to primary during a failover event.

Question 4

Which CyberArk component manages the automatic rotation of passwords according to platform policies?

Accepted Answer

CPM (Central Policy Manager)

Answer

The CPM automates credential rotation, verification, and reconciliation based on the policies defined for each platform.

Question 5

What is the purpose of the CyberArk Vault's 'Safe' object?

Accepted Answer

A logical container that groups accounts and controls access permissions

Answer

A Safe is the fundamental access-control boundary in the Vault, grouping related accounts and defining who can perform which operations on them.

(CAD) CyberArk Defender Certification Practice Test