CyberArk CyberArk Certifications CAU201 Questions & Answers

• Question 111:

  The vault supports Subnet Based Access Control.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 112:

  Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply.

  A. PSM connections to target devices that are not managed by CyberArk.

  B. Session Recording.

  C. Real-time live session monitoring.

  D. PSM connections from a terminal without the need to login to the PVWA.

  Correct Answer: ABC

• Question 113:

  When a group is granted the 'Authorize Account Requests' permission on a safe Dual Control requests must be approved by

  A. Any one person from that group

  B. Every person from that group

  C. The number of persons specified by the Master Policy

  D. That access cannot be granted to groups

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Dual-Control.htm#Confirmi

• Question 114:

  What is the primary purpose of One Time Passwords?

  A. Reduced risk of credential theft

  B. More frequent password changes

  C. Non-repudiation (individual accountability)

  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

  Correct Answer: A

• Question 115:

  PSM for Windows (previously known as "RDP Proxy") supports connections to the following target systems

  A. Windows

  B. UNIX

  C. Oracle

  D. All of the above

  Correct Answer: A

  Reference: https://knowhow.tajco-group.com/knowledge-base/using-a-standard-rdp-client-application/

• Question 116:

  Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.

  A. TRUE

  B. FALSE

  Correct Answer: B

  Reference: https://www.freshers360.com/wp-content/uploads/2019/05/Privileged-Account-Security-Implementation-Guide.pdf

• Question 117:

  The Accounts Feed contains:

  A. Accounts that were discovered by CyberArk in the last 30 days

  B. Accounts that were discovered by CyberArk that have not yet been onboarded

  C. All accounts added to the vault in the last 30 days

  D. All users added to CyberArk in the last 30 days

  Correct Answer: A

• Question 118:

  CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

  A. TRUE

  B. FALSE

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the-CyberArk-License.htm

• Question 119:

  By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

  A. Vault Admins

  B. Security Admins

  C. Security Operators

  D. Auditors

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/Security-Configuration.htm

• Question 120:

  A user with administrative privileges to the vault can only grant other users privileges that he himself has.

  A. TRUE

  B. FALSE

  Correct Answer: B