CyberArk CyberArk Certifications CAU201 Questions & Answers

• Question 121:

  Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?

  A. Yes, when using the connect button, CyberArk uses the PMTerminal.exe process which bypasses the root SSH restriction.

  B. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.

  C. Yes, if a logon account is associated with the root account.

  D. No, it is not possible.

  Correct Answer: B

  Reference: https://www.reddit.com/r/CyberARk/comments/7zx8w5/ssh_connection/

• Question 122:

  The vault supports Role Based Access Control.

  A. TRUE

  B. FALSE

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Object-Level-Access-Control.htm

• Question 123:

  One can create exceptions to the Master Policy based on ____________________.

  A. Safes

  B. Platforms

  C. Policies

  D. Accounts

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/The-Master-Policy.htm

• Question 124:

  Which of the following PTA detections are included in the Core PAS offering?

  A. Suspected Credential Theft

  B. Over-Pass-The Hash

  C. Golden Ticket

  D. Unmanaged Privileged Access

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/What-Does-PTA-Detect.htm

• Question 125:

  Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

  A. Accounts Discovery

  B. Auto Detection

  C. Onboarding RestAPI functions

  D. PTA Rules

  Correct Answer: B

• Question 126:

  What is the purpose of a linked account?

  A. To ensure that a particular collection of accounts all have the same password.

  B. To ensure a particular set of accounts all change at the same time.

  C. To connect the CPNI to a target system.

  D. To allow more than one account to work together as part of a password management process.

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Linked-Accounts.htm

• Question 127:

  Secure Connect provides the following features. Choose all that apply.

  A. PSM connections to target devices that are not managed by CyberArk.

  B. Session Becording.

  C. real-time live session monitoring.

  D. PSM connections from a terminal without the need to login to the PVWA.

  Correct Answer: AB

• Question 128:

  SAFE Authorizations may be granted to _________________.

  Select all that apply.

  A. Vault Users

  B. Vault Groups

  C. LDAP Users

  D. LDAP Groups

  Correct Answer: A

• Question 129:

  A Reconcile Account can be specified in the Master Policy.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 130:

  In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

  A. True.

  B. False. Because the user can also enter credentials manually using Secure Connect.

  C. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSMConnect.

  D. False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

  Correct Answer: B