CyberArk Defender – PAM — Question 56

When should vault keys be rotated?

Answer options

• A. when it is copied to file systems outside the vault
• B. annually
• C. whenever a CyberArk user leaves the organization
• D. when migrating to a new data center

Correct answer: A

Explanation

Vault keys should be rotated when they are copied to external file systems to prevent unauthorized access and maintain security. The other options, such as annually or when a user leaves, do not specifically address the immediate security risks associated with copying keys outside the vault.