CyberArk CAU201 Online Practice Questions and Exam Preparation

CyberArk CAU201 Online Questions & Answers

• Question 101:

  The vault supports Role Based Access Control.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 102:

  A Vault administrator have associated a logon account to one of their Unix root accounts in the vault. When attempting to verify the root account's password the Central Policy Manager (CPM) will:

  A. ignore the logon account and attempt to log in as root
  B. prompt the end user with a dialog box asking for the login account to use
  C. log in first with the logon account, then run the SU command to log in as root using the password in the Vault
  D. none of these
  B. prompt the end user with a dialog box asking for the login account to use

• Question 103:

  How much disk space do you need on the server for a PAReplicate?

  A. 500 GB
  B. 1 TB
  C. same as disk size on Satellite Vault
  D. same as disk size on Primary Vault
  D. same as disk size on Primary Vault

• Question 104:

  For a safe with Object Level Access enabled you can turn off Object Level Access Control when it no longer needed on the safe.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 105:

  Which CyberArk utility allows you to create lists of Master Policy Settings, owners and safes for output to text files or MSSQL databases?

  A. Export Vault Data
  B. Export Vault Information
  C. PrivateArk Client
  D. Privileged Threat Analytics
  A. Export Vault Data

• Question 106:

  Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

  A. Suspected credential theft
  B. Over-Pass-The-Hash
  C. Golden Ticket
  D. Unmanaged privileged access
  C. Golden Ticket

• Question 107:

  A user is receiving the error message "ITATS006E Station is suspended for User jsmith" when attempting to sign into the Password Vault Web Access (PVWA). Which utility would a Vault administrator use to correct this problem?

  A. createcredfile.exe
  B. cavaultmanager.exe
  C. PrivateArk
  D. PVWA
  C. PrivateArk

• Question 108:

  In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.

  A. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server's root account.
  B. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.
  C. Configure the Unix system to allow SSH logins.
  D. Configure the CPM to allow SSH logins.
  B. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.

• Question 109:

  Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply.

  A. PSM connections to target devices that are not managed by CyberArk.
  B. Session Recording.
  C. Real-time live session monitoring.
  D. PSM connections from a terminal without the need to login to the PVWA.
  A. PSM connections to target devices that are not managed by CyberArk.
  B. Session Recording.
  C. Real-time live session monitoring.

• Question 110:

  When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA) and receive approval before being able to launch a secure connection via PSM for Windows (previously known as RDP Proxy).

  A. True
  B. False, a user can submit the request after the connection has already been initiated via the PSM for Windows
  B. False, a user can submit the request after the connection has already been initiated via the PSM for Windows