CAD Enterprise Password Vault Policies 3

Question 1

In CyberArk EPV, what does enabling 'Require dual control password access approval' in the Master Policy accomplish?

Accepted Answer

Requires two approvers before a password can be retrieved

Answer

Dual-control approval requires at least two authorized users to approve a password request before it can be checked out.

Question 2

Which CyberArk policy exception allows a specific account to bypass the global Master Policy rotation interval?

Accepted Answer

Account-level override via account properties

Answer

Account-level overrides in the account's properties can override platform defaults (and Master Policy exceptions) for individual accounts.

Question 3

A CyberArk administrator wants to ensure that service accounts are NEVER automatically changed by the CPM. Which platform setting achieves this?

Accepted Answer

Set ChangePassword to 'No'

Answer

Setting the platform's ChangePassword property to 'No' instructs the CPM to skip automatic password rotation for accounts under that platform.

Question 4

What is the effect of setting 'Enforce check-in/check-out exclusive access' in a CyberArk Safe's Master Policy?

Accepted Answer

Locks the password so only one user can hold it at a time

Answer

Exclusive access check-in/check-out ensures only one user holds a given account credential at any moment, preventing simultaneous use.

Question 5

In which CyberArk configuration file are the default platform policy parameters defined for new platforms?

Accepted Answer

PVConfiguration.xml

Answer

PVConfiguration.xml contains global Vault configuration settings, while individual platform XML files define their own parameters inheriting from platform defaults.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Enterprise Password Vault Policies 3