CAD Setup 3

Question 1

Which CyberArk component should be installed in the DMZ to facilitate RDP and SSH session proxying?

Accepted Answer

PSM

Answer

The Privileged Session Manager (PSM) is typically deployed in the DMZ to act as a jump server for proxying RDP and SSH sessions to target systems.

Question 2

What is the significance of the 'Operator' CD in a CyberArk Vault installation?

Accepted Answer

It holds the Vault encryption keys used for disaster recovery

Answer

The Operator CD (or USB) contains the Vault's master encryption keys, which are essential for disaster recovery and Vault restoration scenarios.

Question 3

During CyberArk setup, Safe creation for CPM operations requires which minimum permission for the CPM user?

Accepted Answer

Add Accounts

Answer

The CPM user needs at minimum 'Add Accounts' and related permissions on the Safe to store and manage the passwords it is responsible for rotating.

Question 4

What is the recommended network placement for the CyberArk Vault server itself?

Accepted Answer

In an isolated network segment with strictly controlled access

Answer

The Vault should be placed in a highly restricted, isolated network segment with minimal open firewall rules to reduce its attack surface.

Question 5

When setting up CyberArk with high availability, what role does a 'DR Vault' play?

Accepted Answer

It serves as a hot standby that can take over if the primary Vault fails

Answer

A DR (Disaster Recovery) Vault continuously replicates data from the primary Vault and can be promoted to take over operations if the primary becomes unavailable.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Setup 3