CAD Privileged Access Management Concepts 2

Question 1

What is the primary purpose of a Privileged Session Manager (PSM) in CyberArk?

Accepted Answer

To proxy and record privileged sessions without exposing credentials to end users

Answer

PSM acts as a proxy between users and target systems, recording sessions while keeping credentials hidden from the end user.

Question 2

Which PAM control ensures that a privileged account password is changed immediately after each use?

Accepted Answer

One-time password (OTP) rotation

Answer

One-time password rotation changes credentials after every checkout, preventing reuse and limiting the window of exposure.

Question 3

In CyberArk, what is a 'Safe' used for?

Accepted Answer

A logical container within the Vault that stores accounts and applies access policies

Answer

A Safe is the primary organizational and access-control unit inside the CyberArk Vault, grouping accounts with shared policies.

Question 4

What does 'least privilege' mean in the context of PAM?

Accepted Answer

Granting users the minimum level of access required to perform their job functions

Answer

Least privilege limits each user or process to only the permissions needed for their specific tasks, reducing the attack surface.

Question 5

What is 'credential theft' in the context of privileged access risks?

Accepted Answer

An attacker obtaining and misusing valid privileged account credentials

Answer

Credential theft occurs when an attacker acquires legitimate privileged credentials and uses them to move laterally or escalate privileges.

(CAD) CyberArk Defender Certification Practice Test