CAD Access Controls

Question 1

What is the purpose of role-based access control (RBAC) in CyberArk?

Accepted Answer

Restrict access based on job role

Answer

Role-based access control (RBAC) in CyberArk allows administrators to define permissions and access rights based on a user's specific job function or role within the organization. This simplifies access management, enforces the principle of least privilege, and ensures users only have access to the resources absolutely necessary for their duties, enhancing security and compliance.

Question 2

Which CyberArk component allows definition of user access to safes?

Accepted Answer

PVWA

Answer

The CyberArk PVWA (Privileged Access Security Web Access) is the primary interface through which administrators configure and manage user access to safes and their contents. It provides the graphical tools and functionalities to define permissions, assign users to safes, and set policies for credential usage, centralizing access control management.

Question 3

What permission is required to retrieve passwords from a safe?

Accepted Answer

Retrieve

Answer

To access and utilize a password stored within a CyberArk safe, a user must be granted the specific 'Retrieve' permission for that safe. This permission allows the user to view or utilize the stored credential, adhering to the principle of least privilege by separating it from other management or administrative permissions within the safe.

Question 4

Which setting can enforce session approval in CyberArk?

Accepted Answer

Dual control

Answer

Dual control is a critical security setting in CyberArk that enforces a 'four-eyes' principle, requiring a second authorized user to approve a privileged session request before it can be initiated. This significantly enhances security for highly sensitive operations by preventing a single point of failure or malicious activity, adding an extra layer of oversight.

Question 5

Which user permission is required to manage other user roles in CyberArk?

Accepted Answer

Manage Users

Answer

To manage other user roles in CyberArk, the 'Manage Users' permission is explicitly required. This permission grants the necessary administrative privileges to create, modify, or delete user accounts and their associated roles and permissions within the CyberArk platform. It ensures proper access control and security management by allowing designated administrators to control who can access and perform actions within the system.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Access Controls