CAD Privileged Access Management Concepts 3

Question 1

What is 'lateral movement' in the context of a privileged access attack?

Accepted Answer

An attacker using compromised credentials to access additional systems within the network

Answer

Lateral movement is the technique attackers use to progressively move through a network after gaining initial access, often leveraging stolen privileged credentials.

Question 2

Which CyberArk component enforces password policies and performs automatic password changes on target systems?

Accepted Answer

CPM (Central Policy Manager)

Answer

The CPM is responsible for enforcing platform-specific password policies and executing automated credential rotation on managed accounts.

Question 3

What is 'dual control' in CyberArk PAM?

Accepted Answer

A workflow where a second authorized user must approve a password request before it is granted

Answer

Dual control requires an approver to authorize a requestor's access before the Vault releases the credential, enforcing four-eyes verification.

Question 4

What is the difference between authentication and authorization in PAM?

Accepted Answer

Authentication verifies identity; authorization determines what resources the verified identity may access

Answer

Authentication confirms identity (who you are), while authorization enforces permissions (what you are allowed to do) after identity is confirmed.

Question 5

In CyberArk, what is a 'platform' in the context of account management?

Accepted Answer

A template that defines how CyberArk manages and interacts with a specific type of account or system

Answer

A CyberArk platform is a policy template that specifies connection methods, password rules, and management settings for a particular account type or target system.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Privileged Access Management Concepts 3