CyberArk CyberArk Certifications CAU201 Questions & Answers

• Question 91:

  The Vault administrator can change the Vault license by uploading the new license to the system Safe.

  A. True

  B. False

  Correct Answer: A

• Question 92:

  Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp. When the client's machine makes an RDP connection to the PSM server, which user will be utilized?

  A. Credentials stored in the Vault for the target machine

  B. Shadowuser

  C. PSMConnect

  D. PSMAdminConnect

  Correct Answer: C

• Question 93:

  Which report shows the accounts that are accessible to each user?

  A. Activity report

  B. Entitlement report

  C. Privileged Accounts Compliance Status report

  D. Applications Inventory report

  Correct Answer: B

• Question 94:

  How does the Vault administrator apply a new license file?

  A. Upload the license.xml file to the system Safe and restart the PrivateArk Server service

  B. Upload the license.xml file to the system Safe

  C. Upload the license.xml file to the Vault Internal Safe and restart the PrivateArk Server service

  D. Upload the license.xml file to the Vault Internal Safe

  Correct Answer: B

• Question 95:

  When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA) and receive approval before being able to launch a secure connection via PSM for Windows (previously known as RDP Proxy).

  A. True

  B. False, a user can submit the request after the connection has already been initiated via the PSM for Windows

  Correct Answer: B

• Question 96:

  Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

  A. Suspected credential theft

  B. Over-Pass-The-Hash

  C. Golden Ticket

  D. Unmanaged privileged access

  Correct Answer: C

• Question 97:

  For a safe with Object Level Access enabled you can turn off Object Level Access Control when it no longer needed on the safe.

  A. TRUE

  B. FALSE

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Object-Level-Access-Control.htm

• Question 98:

  When creating an onboarding rule, it will be executed upon ___________________.

  A. All accounts in the pending accounts list

  B. Any future accounts discovered by a discovery process

  C. Both "All accounts in the pending accounts list" and "Any future accounts discovered by a discovery process"

  Correct Answer: B

• Question 99:

  The password upload utility must run from the CPM server

  A. TRUE

  B. FALSE

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Password-Upload-Utility.htm

• Question 100:

  Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.

  A. HeadStartInterval

  B. Interval

  C. ImmediateInterval

  D. The CPM does not change the password under this circumstance

  Correct Answer: B