CyberArk CAU201 Online Practice Questions and Exam Preparation

CyberArk CAU201 Online Questions & Answers

• Question 121:

  Which Automatic Remediation is configurable for a PTA detection of a "Suspected Credential Theft"?

  A. Add to Pending
  B. Rotate Credentials
  C. Reconcile Credentials
  D. Disable Account
  C. Reconcile Credentials

• Question 122:

  Select the best practice for storing the Master CD.

  A. Copy the files to the Vault server and discard the CD
  B. Copy the contents of the CD to a Hardware Security Module (HSM) and discard the CD
  C. Store the CD in a secure location, such as a physical safe
  D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder secured with NTFS permissions on the Vault
  D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder secured with NTFS permissions on the Vault

• Question 123:

  What is the primary purpose of One Time Passwords?

  A. Reduced risk of credential theft
  B. More frequent password changes
  C. Non-repudiation (individual accountability)
  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.
  A. Reduced risk of credential theft

• Question 124:

  DRAG DROP

  Arrange the steps to restore a Vault using PARestore for a Backup in the correct sequence.

  Select and Place:

  

  

• Question 125:

  You received a notification from one of your CyberArk auditors that they are missing Vault level audit permissions. You confirmed that all auditors are missing the Audit Users Vault permission. Where do you update this permission for all auditors?

  A. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Vault Authorizations
  B. Private Ark Client > Tools > Administrative Tools > Users and Groups > Auditors > Authorizations tab
  C. PVWA User Provisioning > LDAP integration > Vault Auditors Mapping > Vault Authorizations
  D. PVWA> Administration > Configuration Options > LDAP integration > Vault Auditors Mapping > Vault Authorizations
  B. Private Ark Client > Tools > Administrative Tools > Users and Groups > Auditors > Authorizations tab

• Question 126:

  In the Private Ark client, how do you add an LDAP group to a CyberArk group?

  A. Select Update on the CyberArk group, and then click Add > LDAP Group
  B. Select Update on the LDAP Group, and then click Add > LDAP Group
  C. Select Member Of on the CyberArk group, and then click Add > LDAP Group
  D. Select Member Of on the LDAP group, and then click Add > LDAP Group
  D. Select Member Of on the LDAP group, and then click Add > LDAP Group

• Question 127:

  Which certificate type do you need to configure the vault for LDAP over SSL?

  A. the CA Certificate that signed the certificate used by the External Directory
  B. a CA signed Certificate for the Vault server
  C. a CA signed Certificate for the PVWA server
  D. a self-signed Certificate for the Vault
  A. the CA Certificate that signed the certificate used by the External Directory

• Question 128:

  Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile Utility? (Choose three.)

  A. Operating System Username
  B. Host IP Address
  C. Client Hostname
  D. Operating System Type (Linux/Windows/HP-UX)
  E. Vault IP Address
  F. Time Frame
  A. Operating System Username
  B. Host IP Address
  C. Client Hostname

• Question 129:

  Your customer, ACME Corp, wants to store the Safes Data in Drive D instead of Drive C. Which file should you edit?

  A. TSparm.ini
  B. Vault.ini
  C. DBparm.ini
  D. user.ini
  A. TSparm.ini

• Question 130:

  PSM captures a record of each command that was executed in Unix.

  A. TRIE
  B. FALSE
  A. TRIE