GUARD CyberArk Guardian Free Practice Questions and Answers

During planning, a customer is concerned that Line of Business teams will resist transitioning their personal privileged accounts to CyberArk. Which option supports a smooth transition?

• A. Exempt the Line of Business from using CyberArk.
• B. Terminate the current access immediately.
• C. Have the Line of Business use CyberArk alongside current access and choose its own transition time.
• D. Provide training and a transition date that allows adequate time to adapt.

You need a solution that asks users to verify that they have executed an application. Which solution is best?

• A. EPM Step-up authentication
• B. Accounts configured with least privilege
• C. Ad Hoc Access and Ad Hoc Connections
• D. PTA Risky Commands

An organization wants a third-party account discovery tool to add accounts to the Account Feed. What is the preferred integration path?

• A. Use Password Upload Utility scripts to add accounts.
• B. Use PACLI to add account objects to the PendingAccounts safe.
• C. Use the CyberArk “add discovered accounts” REST API method.
• D. Configure the CPM scanner to scan another data source.

A customer needs the lowest possible recovery time for vault server failure across primary and secondary data centers. Which architecture is most suitable?

• A. Four vaults across multiple public clouds and regions
• B. Primary and DR vault clusters in the primary and secondary data centers
• C. A distributed vault architecture with a primary vault and satellite vaults across both data centers
• D. Primary and DR standalone vaults in one cloud region

Why should a failed CPM verification followed by reconciliation generally be treated as a security incident?

• A. The secret may have been changed outside CyberArk and could be compromised.
• B. The secret is not configured for automatic reconciliation.
• C. The CPM should never perform reconciliation.
• D. The secret was rotated outside an approved change-control window.