CyberArk CyberArk Certifications CAU201 Questions & Answers

• Question 151:

  What is the name of the Platform parameter that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

  A. MinValidityPeriod

  B. Interval

  C. ImmediateInterval

  D. Timeout

  Correct Answer: D

• Question 152:

  PSM captures a record of each command that was executed in Unix.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 153:

  Which one of the following reports is NOT generated by using the PVWA?

  A. Account Inventory

  B. Application Inventory

  C. Safes List

  D. Compliance Status

  Correct Answer: C

  Reference: https://techinsight.com.vn/language/en/privileged-account-security-solution-part-2/

• Question 154:

  Target account platforms can be restricted to accounts that are stored in specific Safes using the AllowedSafes property.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 155:

  When on-boarding account using Accounts Feed, which of the following is true?

  A. You must specify an existing Safe where the account will be stored when it is on-boarded to the Vault.

  B. You can specify the name of a new safe that will be created where the account will be stored when it is on-boarded to the Vault.

  C. You can specify the name of a new Platform that will be created and associated with the account.

  D. Any account that is on-boarded can be automatically reconciled regardless of the platform it is associated with.

  Correct Answer: C

  Reference: https://www.cyberark.com/resource/automating-privileged-account-onboarding/

• Question 156:

  As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 157:

  Which report provides a list of accounts stored in the vault.

  A. Privileged Accounts Inventory

  B. Privileged Accounts Compliance Status

  C. Entitlement Report

  D. Activity Log

  Correct Answer: A

  Reference: https://techinsight.com.vn/language/en/privileged-account-security-solution-part-2/

• Question 158:

  For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

  A. Create an exception to the Master Policy to exclude the group from the workflow process.

  B. Edit the master policy rule and modify the advanced `Access safe without approval' rule to include the group.

  C. On the safe in which the account is stored grant the group the `Access safe without audit' authorization.

  D. On the safe in which the account is stored grant the group the `Access safe without confirmation' authorization.

  Correct Answer: A

  Reference: https://www.reddit.com/r/CyberARk/comments/6270zr/dual_control_on_specific_accounts/

• Question 159:

  A Logon Account can be specified in the Master Policy.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 160:

  Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that apply.

  A. PAR Agent

  B. PrivateArk Server Central Administration

  C. Edit DBParm.ini in a text editor.

  D. Setup.exe

  Correct Answer: A