CAD Vault Management 2

Question 1

Which CyberArk Vault component is responsible for enforcing access control policies and logging all activity?

Accepted Answer

Digital Vault

Answer

The Digital Vault is the core component that enforces access control, encrypts stored credentials, and maintains an immutable audit log of all activity.

Question 2

In CyberArk, what is the purpose of the Safe's 'Expiration Date' property?

Accepted Answer

It disables access to the Safe on the specified date

Answer

Setting an Expiration Date on a Safe disables all access to that Safe once the date is reached, preventing further use of stored credentials.

Question 3

What is the minimum number of Master CD keys required to reconstruct the Vault Encryption Key during disaster recovery?

Accepted Answer

All provided Master CD keys

Answer

All Master CD keys issued during Vault initialization must be used together to reconstruct the Vault Encryption Key for disaster recovery.

Question 4

Which Safe is used by CyberArk to store the Vault's own internal configuration and system accounts?

Accepted Answer

VaultInternal Safe

Answer

The VaultInternal Safe stores CyberArk's own system credentials and configuration data used internally by Vault services.

Question 5

A CyberArk administrator needs to prevent a specific user from accessing a Safe even though that user is a member of a group that has Safe access. What is the correct approach?

Accepted Answer

Add the user to the Safe with no permissions

Answer

Adding a user directly to a Safe with zero permissions overrides inherited group-level permissions, effectively blocking that individual's access.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Vault Management 2