CAD Enterprise Password Vault Policies 5

Question 1

Which CyberArk component stores the Master Policy and enforces it across all Safes by default?

Accepted Answer

Digital Vault Server

Answer

The Digital Vault Server (Vault) is the authoritative source that stores and enforces the Master Policy governing all Safes.

Question 2

In CyberArk, what is the role of the 'Logon Account' associated with a platform?

Accepted Answer

A credential the CPM uses to authenticate to the target before performing a password change

Answer

A Logon Account provides the CPM with credentials to authenticate to the remote target system so it can perform password management tasks.

Question 3

Which Safe member permission is required to add new accounts to a CyberArk Safe?

Accepted Answer

Add accounts

Answer

The 'Add accounts' permission specifically allows a Safe member to onboard new privileged accounts into the Safe.

Question 4

A CyberArk platform is configured with 'ImmediateInterval' set to 5 minutes. What does this control?

Accepted Answer

The grace period before an immediate change request is executed

Answer

ImmediateInterval defines how many minutes the CPM waits before executing an 'immediate change' request that was triggered manually or by policy.

Question 5

When configuring a CyberArk Safe, which setting restricts access to accounts stored in the Safe to a specific time window each day?

Accepted Answer

Time-based restrictions in the Safe member permissions

Answer

CyberArk allows Safe member permissions to include time-based access restrictions, limiting when a user can retrieve passwords from the Safe.

(CAD) CyberArk Defender Certification Practice Test