CAD PAM Basics 3

Question 1

What is the purpose of the 'exclusive check-out' policy in CyberArk?

Accepted Answer

Ensuring only one user at a time can retrieve and use a shared password

Answer

Exclusive check-out ensures that when one user has checked out a password, no other user can retrieve it until it is checked back in.

Question 2

Which principle does PAM primarily enforce when granting privileged access?

Accepted Answer

Least privilege

Answer

PAM enforces least privilege by ensuring users have only the minimum level of access required to complete their tasks.

Question 3

What happens to a privileged account password by default after it is checked back into CyberArk?

Accepted Answer

The CPM automatically rotates it to a new value

Answer

Upon check-in, the CPM rotates the password immediately (if configured for immediate change) so the checked-out value is no longer valid.

Question 4

Which CyberArk component provides a web-based interface for end users to request and manage privileged accounts?

Accepted Answer

Password Vault Web Access (PVWA)

Answer

PVWA is the web portal through which users access, request, and manage privileged accounts stored in the Vault.

Question 5

What does 'account discovery' refer to in a PAM deployment?

Accepted Answer

Automatically scanning the environment to find unmanaged privileged accounts

Answer

Account discovery scans networks, directories, and endpoints to identify privileged accounts that are not yet managed by the PAM solution.

(CAD) CyberArk Defender Certification Practice Test