CAD CyberArk Architecture & Components 3

Question 1

Which CyberArk component is specifically designed to detect anomalous privileged account behavior and generate risk-based alerts?

Accepted Answer

PTA (Privileged Threat Analytics)

Answer

PTA analyzes behavioral data from CyberArk and external sources to detect and alert on suspicious privileged activity.

Question 2

What is the function of the CyberArk 'Reconcile Account' feature?

Accepted Answer

It resets a target account password when the CPM-managed password is out of sync

Answer

Reconciliation uses a separate privileged 'reconcile account' to reset a target account's password when normal CPM rotation fails due to a mismatch.

Question 3

CyberArk's EPM (Endpoint Privilege Manager) primarily addresses which security challenge?

Accepted Answer

Removing local admin rights and controlling application execution on endpoints

Answer

EPM enforces least-privilege on endpoints by removing unnecessary local admin rights and controlling which applications can execute.

Question 4

In CyberArk, which object defines the technical parameters (e.g., connection method, port, prompt patterns) used by the CPM to manage a specific type of target system?

Accepted Answer

Platform (Plugin)

Answer

A Platform (also called a CPM plugin) defines how the CPM connects to and rotates credentials on a specific target system type.

Question 5

Which CyberArk Vault component handles encryption key management and is the most sensitive element of the Vault infrastructure?

Accepted Answer

Vault Server with the Server Key

Answer

The Vault Server holds and uses the Server Key (Master CD key) to protect all encrypted data; its compromise would expose the entire Vault.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD CyberArk Architecture & Components 3