CyberArk Defender CAU201 Questions & Answers

• Question 21:

  Which built-in report from the reports page in PVWA displays the number of days until a password is due to expire?

  A. Privileged Accounts Inventory

  B. Privileged Accounts Compliance Status

  C. Activity Log

  D. Privileged Accounts CPM Status

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ReportsInPVWA.htm?TocPath=End%20User%7CReports%20and%20Audits%7C_____1

• Question 22:

  Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile Utility? (Choose three.)

  A. Operating System Username

  B. Host IP Address

  C. Client Hostname

  D. Operating System Type (Linux/Windows/HP-UX)

  E. Vault IP Address

  F. Time Frame

  Correct Answer: AC

• Question 23:

  A new HTML5 Gateway has been deployed in your organization. Where do you configure the PSM to use the HTML5 Gateway?

  A. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway

  B. Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers

  C. Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway

  D. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details

  Correct Answer: A

• Question 24:

  Due to network activity, ACME Corp's PrivateArk Server became active on the OR Vault while the Primary Vault was also running normally. All the components continued to point to the Primary Vault. Which steps should you perform to restore DR replication to normal?

  A. Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  B. Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  C. Shutdown PrivateArk Server on Primary Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  D. Shutdown PrivateArk Server on DR Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Upgrading-to-a-Distributed-Vaults-Environment-from-an-Active-Passive-Vault-DR-Environment.htm?Highlight=safe%20does%20not% 20support%20properties

• Question 25:

  You are creating a shared safe for the help desk.

  What must be considered regarding the naming convention?

  A. Ensure your naming convention is no longer than 20 characters.

  B. Combine environments, owners and platforms to minimize the total number of safes created.

  C. Safe owners should determine the safe name to enable them to easily remember it.

  D. The use of these characters V:*<>".| is not allowed.

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/MESSAGES/Safe%20Properties%20New%20Safe.htm?TocPath=Administration%7CReferences%7CMessages%20and%20Responses%7CPrivateArk% 20Client%7C_____11

• Question 26:

  You are creating a Dual Control workflow for a team's safe. Which safe permissions must you grant to the Approvers group?

  A. List accounts, Authorize account request

  B. Retrieve accounts, Access Safe without confirmation

  C. Retrieve accounts, Authorize account request

  D. List accounts, Unlock accounts

  Correct Answer: C

• Question 27:

  You receive this error:

  “Error in changepass to user domain\user on domain server(\domain.(winRc=5) Access is denied.”

  Which root cause should you investigate?

  A. The account does not have sufficient permissions to change its own password.

  B. The domain controller is unreachable.

  C. The password has been changed recently and minimum password age is preventing the change.

  D. The CPM service is disabled and will need to be restarted.

  Correct Answer: A

• Question 28:

  A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request. What is the correct location to identify users or groups who can approve?

  A. PVWA> Administration > Platform Configuration > Edit Platform > UI and Workflow > Dual Control> Approvers

  B. PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests

  C. PVWA> Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers

  D. PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)

  Correct Answer: B

• Question 29:

  In a rule using “Privileged Session Analysis and Response” in PTA, which session options are available to configure as responses to activities?

  A. Suspend, Terminate, None

  B. Suspend, Terminate, Lock Account

  C. Pause, Terminate, None

  D. Suspend, Terminate

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/Security-Configuration.htm?TocPath=End%20User%7CSecurity%20Events%7C_____3

• Question 30:

  For Digital Vault Cluster in a high availability configuration, how does the cluster determine if a node is down?

  A. The heartbeat s no longer detected on the private network.

  B. The shared storage array is offline.

  C. An alert is generated in the Windows Event log.

  D. The Digital Vault Cluster does not detect a node failure.

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the-CyberArk-Digital-Cluster-Vault-Server.htm?TocPath=Administration%7CComponents%7CDigital%20Vault%7COperate%20the% 20CyberArk%20Vault%7CCyberArk%20High-Availability%20Vault%20Cluster%7C_____1