You have been asked to secure a set of shared accounts in CyberArk whose passwords will need to be used by end users. The account owner wants to be able to track who was using an account at any given moment.
Which security configuration should you recommend?
To track who used an account at any given moment, you should configure both one-time passwords and exclusive access for the appropriate platform in Master Policy. One-time passwords ensure that each usage is unique and can be logged, while exclusive access makes sure that only one user at a time can use a specific account, allowing for accurate tracking and accountability.
Object level access allows you to grant access to certain accounts within a safe regardless of safe authorizations. This doesn't tell you who used what account at what time. To say exactly which user used which account at what time, OTP and exclusive account is best way to go.
C is correct answer.