CyberArk CyberArk Certifications CAU201 Questions & Answers

• Question 101:

  According to the DEFAULT Web Options settings, which group grants access to the REPORTS page?

  A. PVWAUsers

  B. Vault Admins

  C. Auditors

  D. PVWAMonitor

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ReportsInPVWA.htm

• Question 102:

  Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

  A. Require dual control password access Approval

  B. Enforce check-in/check-out exclusive access

  C. Enforce one-time password access

  D. Enforce check-in/check-out exclusive access and Enforce one-time password access

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-master-policy-rules.htm

• Question 103:

  Time of day or day of week restrictions on when password verifications can occur configured in ____________________.

  A. The Master Policy

  B. The Platform settings

  C. The Safe settings

  D. The Account Details

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Verifying-Passwords.htm

• Question 104:

  Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.

  A. TRUE

  B. FALSE

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/MESSAGES/Password%20Vault%20Web%20Access%20Messages-%20General.htm

• Question 105:

  Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

  A. PSM (i.e., launching connections by clicking on the "Connect" button in the PVWA)

  B. PSM for Windows (previously known as RDP Proxy)

  C. PSM for SSH (previously known as PSM SSH Proxy)

  D. All of the above

  Correct Answer: A

• Question 106:

  What is the primary purpose of Dual Control?

  A. Reduced risk of credential theft

  B. More frequent password changes

  C. Non-repudiation (individual accountability)

  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Dual-Control.htm

• Question 107:

  When managing SSH keys, the CPM stores the Public Key

  A. In the Vault

  B. On the target server

  C. A and B

  D. Nowhere because the public key can always be generated from the private key.

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing%20SSH%20Keys.htm

• Question 108:

  Accounts Discovery allows secure connections to domain controllers.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 109:

  Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed.

  A. HeadStartInterval

  B. Interval

  C. ImmediateInterval

  D. The CPM does not change the password under this circumstance

  Correct Answer: C

• Question 110:

  When managing SSH keys, the CPM stored the Private Key

  A. In the Vault

  B. On the target server

  C. A and B

  D. Nowhere because the private key can always be generated from the public key.

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing%20SSH%20Keys.htm