CAD PAM Basics 2

Question 1

Which CyberArk component is responsible for rotating credentials automatically after they are checked in?

Accepted Answer

Central Policy Manager (CPM)

Answer

The Central Policy Manager (CPM) automatically rotates credentials based on configured policies after they are checked in.

Question 2

In CyberArk, what term describes an account whose credentials are stored and managed inside the Digital Vault?

Accepted Answer

Onboarded account

Answer

An onboarded account is one whose credentials have been brought under CyberArk Vault management.

Question 3

Which PAM concept ensures that each privileged session is recorded and can be audited later?

Accepted Answer

Session monitoring

Answer

Session monitoring records privileged sessions so security teams can review, audit, or replay them.

Question 4

What is 'dual control' in the context of CyberArk PAM?

Accepted Answer

Requiring a second approver before a password is retrieved

Answer

Dual control requires a second authorized user to approve a password retrieval request before it is granted.

Question 5

Which of the following best describes 'standing privileges' in PAM terminology?

Accepted Answer

Always-on privileged access that persists even when not needed

Answer

Standing privileges are persistent, always-active privileged accounts that pose a higher risk because they are available even when not in use.

(CAD) CyberArk Defender Certification Practice Test