CAD Vault Management 3

Question 1

In CyberArk's hierarchical permission model, which level takes the highest precedence when there is a conflict between Vault, Safe, and folder permissions?

Accepted Answer

The most restrictive permission at any level wins

Answer

CyberArk applies the most restrictive permission across all levels, so a deny or missing permission at any level blocks the action even if higher levels grant it.

Question 2

What is the role of the 'Owners' group within a CyberArk Safe?

Accepted Answer

They have full control including the ability to manage Safe membership

Answer

Safe Owners have full administrative rights over the Safe, including managing other members' permissions and configuring Safe properties.

Question 3

Which CyberArk Vault feature automatically backs up the entire Vault database to a secondary location at scheduled intervals?

Accepted Answer

Disaster Recovery Vault

Answer

The Disaster Recovery (DR) Vault uses built-in replication to continuously or periodically sync the primary Vault's data to a secondary DR Vault server.

Question 4

When a CyberArk Safe has the 'Require reason for access' option enabled, where is the user-provided reason stored?

Accepted Answer

In the Vault audit log linked to the access event

Answer

The reason entered by the user is captured and stored in the Vault's immutable audit log, associated with the specific access event.

Question 5

A security team wants to ensure that when a privileged account password is checked out, no other user can check it out simultaneously. Which Safe setting achieves this?

Accepted Answer

Enable 'Exclusive access' mode

Answer

Enabling Exclusive Access on a Safe ensures that only one user can hold a checked-out password at a time, preventing concurrent checkouts.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Vault Management 3