Practice Test Geeks(CAD) CyberArk Defender Certification Practice Test
← All CAD Flashcard Decks

CyberArk Architecture & Components Flashcards

7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 CyberArk Architecture & Components flashcards as text

  1. In CyberArk's distributed architecture, which component acts as the web interface through which end users request and retrieve privileged credentials?

    Answer: PVWA

    The PVWA (Password Vault Web Access) is the browser-based portal users interact with to access accounts, initiate sessions, and manage the Vault.

  2. Which CyberArk feature allows a single PSM session recording to be searched at the text level without manual review?

    Answer: PSM Session Audit with OCR text indexing

    CyberArk PSM can index session recording content via OCR, enabling text-level search across recorded sessions to find specific commands or activity.

  3. What is the purpose of a CyberArk 'Dual Control' workflow?

    Answer: Requires a second authorized user to approve credential access before it is granted

    Dual Control enforces a four-eyes principle where a requester cannot access a credential until a designated approver grants permission.

  4. In CyberArk, which Safe permission allows a user to add new password objects to a Safe?

    Answer: Add Accounts

    The 'Add Accounts' permission specifically grants the ability to create new account objects within a Safe.

  5. Which CyberArk component or feature enables Just-In-Time (JIT) provisioning of privileged access for cloud and on-premises targets?

    Answer: CyberArk Dynamic Privileged Access (Conjur/DPA)

    CyberArk's Dynamic Privileged Access (DPA) grants ephemeral, just-in-time privileged access without storing long-lived credentials in the Vault.

  6. What happens to a CyberArk managed account password after a one-time retrieval configured with 'change password after check-in'?

    Answer: The CPM rotates the password immediately after the user checks the credential back in

    When configured for change after check-in, the CPM triggers an immediate password rotation as soon as the account is returned to the Vault.

  7. In CyberArk's Vault replication topology, what type of replication does CyberArk use between the primary and DR Vault?

    Answer: Synchronous one-way replication from primary to DR

    CyberArk uses synchronous, one-way replication from the primary Vault to the DR Vault, ensuring the DR always has an up-to-date copy.