CyberArk Defender CAU201 Questions & Answers

• Question 11:

  In PVWA, you are attempting to play a recording made of a session by user jsmith, but there is no option to “Fast Forward” within the video. It plays and only allows you to skip between commands instead. You are also unable to download the video.

  What could be the cause?

  A. Recording is of a PSM for SSH session.

  B. The browser you are using is out of date and needs an update to be supported.

  C. You do not have the “View Audit” permission on the safe where the account is stored.

  D. You need to update the recorder settings in the platform to enable screen capture every 10000 ms or less.

  Correct Answer: B

• Question 12:

  When onboarding multiple accounts from the Pending Accounts list, which associated setting must be the same across the selected accounts?

  A. Platform

  B. Connection Component

  C. CPM

  D. Vault

  Correct Answer: A

• Question 13:

  To manage automated onboarding rules, a CyberArk user must be a member of which group?

  A. Vault Admins

  B. CPM User

  C. Auditors

  D. Administrators

  Correct Answer: A

• Question 14:

  Your organization has a requirement to allow users to “check out passwords” and connect to targets with the same account through the PSM. What needs to be configured in the Master policy to ensure this will happen?

  A. Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active

  B. Enforce check-in/check-out exclusive access = inactive; Require privileged session monitoring and isolation = inactive

  C. Enforce check-in/check-out exclusive access = inactive; Record and save session activity = active

  D. Enforce check-in/check-out exclusive access = active; Record and save session activity = inactive

  Correct Answer: C

• Question 15:

  Which permissions are needed for the Active Directory user required by the Windows Discovery process?

  A. Domain Admin

  B. LDAP Admin

  C. Read/Write

  D. Read

  Correct Answer: D

• Question 16:

  Which command configures email alerts within PTA if settings need to be changed post install?

  A. /opt/tomcat/utility/emailConfiguration.sh

  B. /opt/PTA/emailConfiguration.sh

  C. /opt/PTA/utility/emailConfig.sh

  D. /opt/tomcat/utility/emailSetup.sh

  Correct Answer: A

• Question 17:

  You are creating a new Rest API user that utilizes CyberArk Authentication. What is a correct process to provision this user?

  A. Private Ark Client > Tools > Administrative Tools > Users and Groups > New > User

  B. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Add

  C. PVWA > User Provisioning > LDAP Integration > Add Mapping

  D. PVWA > User Provisioning > Users and Groups > New > User

  Correct Answer: B

• Question 18:

  You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account. How should this be configured to allow for password management using least privilege?

  A. Configure each CPM to use the correct logon account.

  B. Configure each CPM to use the correct reconcile account.

  C. Configure the UNIX platform to use the correct logon account.

  D. Configure the UNIX platform to use the correct reconcile account.

  Correct Answer: C

• Question 19:

  In a default CyberArk installation, which group must a user be a member of to view the “reports” page in PVWA?

  A. PVWAMonitor

  B. ReportUsers

  C. PVWAReports

  D. Operators

  Correct Answer: A

• Question 20:

  To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?

  A. List Accounts, Use Accounts

  B. List Accounts, Use Accounts, Retrieve Accounts

  C. Use Accounts

  D. List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PSSO-PSMConnecPVWA.htm?TocPath=End%20User%7CConnect%20to%20Accounts%7CPrivileged%20Single%20Sign-On%7C_____2