Free CAU201 Exam Dumps Preview

Question 1

Single choice

To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?

1. A

   List Accounts, Use Accounts

2. B

   List Accounts, Use Accounts, Retrieve Accounts

3. C

   Use Accounts

4. D

   List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation

Reveal answer details Close answer details

Correct answerC

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PSSO-PSMConnecPVWA.htm?TocPath=End%20User%7CConnect%20to%20Accounts%7CPrivileged%20Single%20Sign-On%7C_____2

Question 2

Single choice

What is the primary purpose of One Time Passwords?

1. A

   Reduced risk of credential theft

2. B

   More frequent password changes

3. C

   Non-repudiation (individual accountability)

4. D

   To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

Reveal answer details Close answer details

Correct answerA

Question 3

Multiple choice

Which keys are required to be present in order to start the PrivateArk Server service?

1. A

   Recovery public key

2. B

   Recovery private key

3. C

   Server key

4. D

   Safe key

Reveal answer details Close answer details

Correct answersA, C

Question 4

Multiple choice

Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

1. A

   Discovery and Audit (DMA)

2. B

   Auto Detection (AD)

3. C

   Export Vault Data (EVD)

4. D

   On Demand Privileges Manager (OPM)

5. E

   Accounts Discovery

Reveal answer details Close answer details

Correct answersA, B, E

Question 5

Single choice

When managing SSH keys, the CPM stores the Public Key

1. A

   In the Vault

2. B

   On the target server

3. C

   A & B

4. D

   Nowhere because the public key can always be generated from the private key.

Reveal answer details Close answer details

Correct answerB

Question 6

Multiple choice

Which of the following properties are mandatory when adding accounts from a file? (Choose three.)

1. A

   Safe Name

2. B

   Platform ID

3. C

   All required properties specified in the Platform

4. D

   Username

5. E

   Address

6. F

   Hostname

Reveal answer details Close answer details

Correct answersA, B, C

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/NewUI/NewUI-Add-multiple-accounts-in-PVWA.htm

Question 7

Multiple choice

Which of the following statements are NOT true when enabling PSM recording for a target Windows server? (Choose all that apply)

1. A

   The PSM software must be instated on the target server

2. B

   PSM must be enabled in the Master Policy (either directly, or through exception)

3. C

   PSMConnect must be added as a local user on the target server

4. D

   RDP must be enabled on the target server

Reveal answer details Close answer details

Correct answersA, B

Question 8

Single choice

Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

1. A

   Password change

2. B

   Password reconciliation

3. C

   Session suspension

4. D

   Session termination

Reveal answer details Close answer details

Correct answerA

Question 9

Single choice

In your organization the "click to connect" button is not active by default.

How can this feature be activated?

1. A

   Policies > Master Policy > Allow EPV transparent connections > Inactive

2. B

   Policies > Master Policy > Session Management > Require privileged session monitoring and isolation
   > Add Exception

3. C

   Policies > Master Policy > Allow EPV transparent connections > Active

4. D

   Policies > Master Policy > Password Management

Reveal answer details Close answer details

Correct answerC

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.1/en/Content/
TranparentConnections_Web.htm

Question 10

Single choice

Which user(s) can access all passwords in the Vault?

1. A

   Administrator

2. B

   Any member of Vault administrators

3. C

   Any member of auditors

4. D

   Master

Reveal answer details Close answer details

Correct answerD

Question 11

Single choice

If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

1. A

   Configure the Provider to change the password to match the Vault's Password

2. B

   Associate a reconcile account and configure the platform to reconcile automatically

3. C

   Associate a logon account and configure the platform to reconcile automatically

4. D

   Run the correct auto detection process to rediscover the password

Reveal answer details Close answer details

Correct answerB

Question 12

Single choice

As long as you are a member of the Vault Admins group you can grant any permission on any safe.

1. A

   TRUE

2. B

   FALSE

Reveal answer details Close answer details

Correct answerB

Explanation

Being in Vault admins group only give you access to safes which are created during installation (safe created in installation process ) -This is clearly mentioned in documents .

Question 13

Single choice

A Logon Account can be specified in the Master Policy.

1. A

   TRUE

2. B

   FALSE

Reveal answer details Close answer details

Correct answerB

Question 14

Single choice

What is the configuration file used by the CPM scanner when scanning UNIX/Linux devices?

1. A

   UnixPrompts.ini

2. B

   plink.exe

3. C

   dbparm.ini

4. D

   PVConfig.xml

Reveal answer details Close answer details

Correct answerA

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/PASIMP/PVWA-Accounts-Feed.htm#:~:text=When%20scanning%20Unix%2FLinux%20devices,ini%20configuration%20file

Question 15

Drag & drop

DRAG DROP

Match the log file name with the CyberArk Component that generates the log.

Reveal answer details Close answer details

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PVWA-Logging.htm

Question 16

Single choice

The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.

How are these keys managed?

1. A

   CyberArk stores Private keys in the Vault and updates Public keys on target systems.

2. B

   CyberArk stores Public keys in the Vault and updates Private keys on target systems.

3. C

   CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.

4. D

   CyberArk stores both Private and Public keys and can update target systems with either key.

Reveal answer details Close answer details

Correct answerA

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.4/en/Content/SSHKM/Using%20SSH%20Keys.htm

Question 17

Single choice

Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

1. A

   TRUE

2. B

   FALSE

Reveal answer details Close answer details

Correct answerA

Question 18

Single choice

You want to generate a license capacity report.

Which tool accomplishes this?

1. A

   Password Vault Web Access

2. B

   PrivateArk Client

3. C

   DiagnoseDB Report

4. D

   RestAPI

Reveal answer details Close answer details

Correct answerB

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.1/en/Content/PASIMP/Reporting-License-Usage.htm

Question 19

Single choice

As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.

1. A

   TRUE

2. B

   FALSE

Reveal answer details Close answer details

Correct answerB

Explanation

Being in Vault admins group only give you access to safes which are created during installation (safe created in installation process ) -This is clearly mentioned in documents.

Question 20

Single choice

Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

1. A

   Require dual control password access Approval

2. B

   Enforce check-in/check-out exclusive access

3. C

   Enforce one-time password access

4. D

   Enforce check-in/check-out exclusive access & Enforce one-time password access

Reveal answer details Close answer details

Correct answerB

Question 21

Single choice

Which CyberArk group does a user need to be part of to view recordings or live monitor sessions?

1. A

   Auditors

2. B

   Vault Admin

3. C

   DR Users

4. D

   Operators

Reveal answer details Close answer details

Correct answerA

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Monitoring-Privileged-Sessions.htm?TocPath=End%20User%7CMonitor%20Sessions%7CClassic%20Interface%7C_____1

Question 22

Single choice

You have been asked to identify the up or down status of Vault services.

Which CyberArk utility can you use to accomplish this task?

1. A

   Vault Replicator

2. B

   PAS Reporter

3. C

   Remote Control Agent

4. D

   Syslog

Reveal answer details Close answer details

Correct answerC

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Remote-Administration-for-the-Vault-DR-Vault.htm?tocpath=Administrator%7CComponents%7CDigital%20Vault%7COperate%20the%20CyberArk%20Vault%7CMonitor%20the%20Vault%7C_____1

Question 23

Single choice

Which item is an option for PSM recording customization?

1. A

   Windows events text recorder with automatic play-back

2. B

   Windows events text recorder and universal keystrokes recording simultaneously

3. C

   Universal keystrokes text recorder with windows events text recorder disabled

4. D

   Custom audio recording for windows events

Reveal answer details Close answer details

Correct answerD

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring-Recordings-and-Audits-in-PSM.htm?Highlight=Use%20the%20Master%20user

Question 24

Single choice

Which report shows the accounts that are accessible to each user?

1. A

   Activity report

2. B

   Entitlement report

3. C

   Privileged Accounts Compliance Status report

4. D

   Applications Inventory report

Reveal answer details Close answer details

Correct answerB

Question 25

Single choice

Accounts Discovery allows secure connections to domain controllers.

1. A

   TRUE

2. B

   FALSE

Reveal answer details Close answer details

Correct answerB

Question 26

Single choice

You have been asked to turn off the time access restrictions for a safe.

Where is this setting found?

1. A

   PrivateArk

2. B

   RestAPI

3. C

   Password Vault Web Access (PVWA)

4. D

   Vault

Reveal answer details Close answer details

Correct answerA

Explanation

References:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.2/en/Content/PASIMP/Advanced-Safe-Management.htm

Question 27

Single choice

The System safe allows access to the Vault configuration files.

1. A

   TRUE

2. B

   FALS

Reveal answer details Close answer details

Correct answerA