Cyberark Final Exam Privileged Access
Management Test Questions with
Rationales 2026-2027 Updated.
Define privilege - Answer term used to designate special access or abilities above and beyond
that of a regular user
What are the two types of privileged access in a business setting? - Answer Human and non
human
What are the types of non human privileged access? - Answer Application accounts: A
privileged account that's specific to the application software and is typically used to administer,
configure, or manage access to the application software. It basically allows two systems to talk
to one another via the application account.
Service accounts: These special accounts are used by an application or service to interact with
other accounts or services. Windows service accounts can be used to access and make changes
to the operating system or the configuration. A Google Cloud Platform service account is a
special account that can be used by services and applications to interact with other Google
Cloud APIs.
Robotic Process Automation (RPA) Bot Accounts: RPA is a form of business process automation
technology based on software robots (bots) or artificial intelligence (AI) workers. Bots
streamline operations by interacting with the user interfaces (UIs) of business applications. Bots
require a lot of access to privileged accounts to perform their work. The secret to success is
figuring out how to provide bots with extensive access but in a way that safeguards the business
and information that you must protect.
SSH keys: SSH keys can use short-lived certificates and are also used by automated processes.
Functionally SSH keys resemble passwords. They grant access and control who can access what
in modern cloud and other computerdependent services. SSH keys have two parts: a public key
and a private key. Private keys can match with public keys and authenticate successfully. For SSH
certificates, a private key is not needed; the public key is signed by a certificate authority, which
is passed and trusted to authenticate.
Secrets: The term secrets is most frequently used by developers development and operations
(DevOps) teams. This is a catch-all term that refers to SSH keys, application p
What are the 7 types of privileged access used by humans? - Answer 1. Superuser type
accounts: This is a special user account that's used for system or tool administration, such as
making configurations to a system or application, adding/removing users, or deleting data
, 2. Domain administrative account: These accounts provide privileged administrative access
across all workstations and servers within a network domain (for example, your company's
network). While these accounts are few in number, they provide the most extensive and robust
access across the network. With complete control over all domain controllers (I cover these
more in Chapter 3), a compromise of these credentials is often a worst-case scenario for an
organization.
Cloud shadow admins: Unlike other types of human privileged access, the cloud shadow admin
isn't a type access that anyone has been delegated. Instead, it comes about due to lack of
oversight of the permissions that are granted to users in cloud environments. People who are
cloud shadow admins may appear to have no privileges but have the ability to create policies
such as "allow all" that enables them to become full admins. This glitch is often overlooked by
security teams because these permissions are managed outside of traditional directory services.
When overlooked and left unsecured, the existence of cloud shadow admins can create
unnecessary risk and increase an attacker's likelihood of success.
Local administrative accounts on workstations: This account uses a combination of a username
and password that helps people access and make changes to workstations.
Secure socket shell (SSH): SSH is a cryptographic network protocol that largely uses SSH keys to
provide direct root access to critical systems. The use of SSH is extremely common for both on-
premises and cloud-based systems. Root is the username or account that by default has access
to all comm
Where does privileged access exists? - Answer » Cloud (cloud consoles, applications built using
DevOps tools and methodologies)
» Data centers, applications, servers, network devices, and other infrastructure
» Endpoints (iPhones, laptops, tablets, and so on)
» Internet of Things (connected devices such as video cameras, wearables, augmented reality,
and other smart devices)
» Industrial Control Systems that allow operators to monitor and control industrial processes in
a variety of industries in oil and gas, utilities, manufacturing, chemical, and so on
What are the two types of risks associated with privileged access? - Answer Insider and
external
Management Test Questions with
Rationales 2026-2027 Updated.
Define privilege - Answer term used to designate special access or abilities above and beyond
that of a regular user
What are the two types of privileged access in a business setting? - Answer Human and non
human
What are the types of non human privileged access? - Answer Application accounts: A
privileged account that's specific to the application software and is typically used to administer,
configure, or manage access to the application software. It basically allows two systems to talk
to one another via the application account.
Service accounts: These special accounts are used by an application or service to interact with
other accounts or services. Windows service accounts can be used to access and make changes
to the operating system or the configuration. A Google Cloud Platform service account is a
special account that can be used by services and applications to interact with other Google
Cloud APIs.
Robotic Process Automation (RPA) Bot Accounts: RPA is a form of business process automation
technology based on software robots (bots) or artificial intelligence (AI) workers. Bots
streamline operations by interacting with the user interfaces (UIs) of business applications. Bots
require a lot of access to privileged accounts to perform their work. The secret to success is
figuring out how to provide bots with extensive access but in a way that safeguards the business
and information that you must protect.
SSH keys: SSH keys can use short-lived certificates and are also used by automated processes.
Functionally SSH keys resemble passwords. They grant access and control who can access what
in modern cloud and other computerdependent services. SSH keys have two parts: a public key
and a private key. Private keys can match with public keys and authenticate successfully. For SSH
certificates, a private key is not needed; the public key is signed by a certificate authority, which
is passed and trusted to authenticate.
Secrets: The term secrets is most frequently used by developers development and operations
(DevOps) teams. This is a catch-all term that refers to SSH keys, application p
What are the 7 types of privileged access used by humans? - Answer 1. Superuser type
accounts: This is a special user account that's used for system or tool administration, such as
making configurations to a system or application, adding/removing users, or deleting data
, 2. Domain administrative account: These accounts provide privileged administrative access
across all workstations and servers within a network domain (for example, your company's
network). While these accounts are few in number, they provide the most extensive and robust
access across the network. With complete control over all domain controllers (I cover these
more in Chapter 3), a compromise of these credentials is often a worst-case scenario for an
organization.
Cloud shadow admins: Unlike other types of human privileged access, the cloud shadow admin
isn't a type access that anyone has been delegated. Instead, it comes about due to lack of
oversight of the permissions that are granted to users in cloud environments. People who are
cloud shadow admins may appear to have no privileges but have the ability to create policies
such as "allow all" that enables them to become full admins. This glitch is often overlooked by
security teams because these permissions are managed outside of traditional directory services.
When overlooked and left unsecured, the existence of cloud shadow admins can create
unnecessary risk and increase an attacker's likelihood of success.
Local administrative accounts on workstations: This account uses a combination of a username
and password that helps people access and make changes to workstations.
Secure socket shell (SSH): SSH is a cryptographic network protocol that largely uses SSH keys to
provide direct root access to critical systems. The use of SSH is extremely common for both on-
premises and cloud-based systems. Root is the username or account that by default has access
to all comm
Where does privileged access exists? - Answer » Cloud (cloud consoles, applications built using
DevOps tools and methodologies)
» Data centers, applications, servers, network devices, and other infrastructure
» Endpoints (iPhones, laptops, tablets, and so on)
» Internet of Things (connected devices such as video cameras, wearables, augmented reality,
and other smart devices)
» Industrial Control Systems that allow operators to monitor and control industrial processes in
a variety of industries in oil and gas, utilities, manufacturing, chemical, and so on
What are the two types of risks associated with privileged access? - Answer Insider and
external
