CYBERARK-PC Practice Test

CYBERARK-PC practice test: what's covered

• Safes
• Accounts
• CPM
• PSM
• Connectors
• Access Policy
• Monitoring
• Recovery

Free CYBERARK-PC sample questions

1. A security engineer needs to separate privileged accounts by application ownership during a controlled production rollout. Which response is the BEST fit?

   • A. create scoped Safes and assign groups only the permissions required for their duties — with change evidence recorded
   • B. place all credentials in one shared Safe with full access — with change evidence recorded
   • C. grant every user Safe ownership — with change evidence recorded
   • D. store passwords in ticket comments — with change evidence recorded
   Show answer

   Correct: A. create scoped Safes and assign groups only the permissions required for their duties — with change evidence recorded is the best answer because Safe-level segregation and group permissions enforce least privilege. The other choices are not the best fit because they either address the wrong layer, broaden access unnecessarily, or skip validation. Useful evidence includes Safe membership, permission set, and account ownership.

2. An administrator must separate privileged accounts by application ownership while investigating an urgent support case. Which action should be taken first?

   • A. create scoped Safes and assign groups only the permissions required for their duties — after confirming scope and ownership
   • B. place all credentials in one shared Safe with full access — after confirming scope and ownership
   • C. grant every user Safe ownership — after confirming scope and ownership
   • D. store passwords in ticket comments — after confirming scope and ownership
   Show answer

   Correct: A. create scoped Safes and assign groups only the permissions required for their duties — after confirming scope and ownership is the best answer because Safe-level segregation and group permissions enforce least privilege. The other choices are not the best fit because they either address the wrong layer, broaden access unnecessarily, or skip validation. Useful evidence includes Safe membership, permission set, and account ownership.

3. A company plans to separate privileged accounts by application ownership during an audit-readiness review. Which design best meets the requirement?

   • A. create scoped Safes and assign groups only the permissions required for their duties — using the vendor-supported workflow
   • B. place all credentials in one shared Safe with full access — using the vendor-supported workflow
   • C. grant every user Safe ownership — using the vendor-supported workflow
   • D. store passwords in ticket comments — using the vendor-supported workflow
   Show answer

   Correct: A. create scoped Safes and assign groups only the permissions required for their duties — using the vendor-supported workflow is the best answer because Safe-level segregation and group permissions enforce least privilege. The other choices are not the best fit because they either address the wrong layer, broaden access unnecessarily, or skip validation. Useful evidence includes Safe membership, permission set, and account ownership.

4. During troubleshooting, the team must separate privileged accounts by application ownership after a regional service change. Which next step is most defensible?

   • A. create scoped Safes and assign groups only the permissions required for their duties — with least privilege preserved
   • B. place all credentials in one shared Safe with full access — with least privilege preserved
   • C. grant every user Safe ownership — with least privilege preserved
   • D. store passwords in ticket comments — with least privilege preserved
   Show answer

   Correct: A. create scoped Safes and assign groups only the permissions required for their duties — with least privilege preserved is the best answer because Safe-level segregation and group permissions enforce least privilege. The other choices are not the best fit because they either address the wrong layer, broaden access unnecessarily, or skip validation. Useful evidence includes Safe membership, permission set, and account ownership.

5. An administrator needs to separate privileged accounts by application ownership before approving a high-risk release. Which TWO actions provide the strongest implementation and verification? (Choose TWO)

   • A. create scoped Safes and assign groups only the permissions required for their duties — with monitoring and rollback defined
   • B. verify the result using Safe membership, permission set, and account ownership — with monitoring and rollback defined
   • C. place all credentials in one shared Safe with full access — with monitoring and rollback defined
   • D. grant every user Safe ownership — with monitoring and rollback defined
   • E. store passwords in ticket comments — with monitoring and rollback defined
   Show answer

   Correct: A and B. create scoped Safes and assign groups only the permissions required for their duties — with monitoring and rollback defined and verify the result using Safe membership, permission set, and account ownership — with monitoring and rollback defined are correct because Safe-level segregation and group permissions enforce least privilege. The other options are not appropriate: they weaken scope, skip a required control, or do not provide reliable evidence for this CyberArk Privilege Cloud scenario.

Last updated: 2026-09-23

CYBERARK-PC practice test FAQ