CyberArk Defender CAU201 Questions & Answers

• Question 31:

  How much disk space do you need on the server for a PAReplicate?

  A. 500 GB

  B. 1 TB

  C. same as disk size on Satellite Vault

  D. same as disk size on Primary Vault

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Installing-the-Vault-Backup-Utility.htm#Beforeinstallation

• Question 32:

  In the Private Ark client, how do you add an LDAP group to a CyberArk group?

  A. Select Update on the CyberArk group, and then click Add > LDAP Group

  B. Select Update on the LDAP Group, and then click Add > LDAP Group

  C. Select Member Of on the CyberArk group, and then click Add > LDAP Group

  D. Select Member Of on the LDAP group, and then click Add > LDAP Group

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/LPLDAPIntegration.htm?TocPath=Administration%7CUser%20Management%7CTransparent%20user%20management%20using% 20LDAP%7C_____2

• Question 33:

  You need to enable the PSM for all platforms. Where do you perform this task?

  A. Platform Management > (Platform) > UI and Workflows

  B. Master Policy > Session Management

  C. Master Policy > Privileged Access Workflows

  D. Administration > Options > Connection Components

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Customizing-PSM-for-Specific-Platforms.htm?TocPath=Administration%7CComponents%7CPrivileged%20Session%20Manager% 7CConfiguration%7C_____8

• Question 34:

  You want to generate a license capacity report. Which tool accomplishes this?

  A. Password Vault Web Access

  B. PrivateArk Client

  C. DiagnoseDB Report

  D. RestAPI

  Correct Answer: B

• Question 35:

  The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.

  How are these keys managed?

  A. CyberArk stores Private keys in the Vault and updates Public keys on target systems.

  B. CyberArk stores Public keys in the Vault and updates Private keys on target systems.

  C. CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.

  D. CyberArk stores both Private and Public keys and can update target systems with either key.

  Correct Answer: A

• Question 36:

  What is the easiest way to duplicate an existing platform?

  A. From PrivateArk, copy/paste the appropriate Policy.ini file; then rename it.

  B. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform and then click Duplicate; name the new platform.

  C. From PrivateArk, copy/paste the appropriate settings in PVConfiguration.xml; then update the policyName variable.

  D. From the PVWA, navigate to the platforms page, select an existing platform that is similar to the new target account platform, manually update the platform settings and click “Save as” INSTEAD of save to duplicate and rename the platform.

  Correct Answer: D

• Question 37:

  You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe Team1.

  What do you need to recover and decrypt the object? (Choose three.)

  A. Recovery Private Key

  B. Recover.exe

  C. Vault data

  D. Recovery Public Key

  E. Server Key

  F. Master Password

  Correct Answer: ADE

• Question 38:

  Which usage can be added as a service account platform?

  A. Kerberos Tokens

  B. IIS Application Pools

  C. PowerShell Libraries

  D. Loosely Connected Devices

  Correct Answer: D

• Question 39:

  When running a “Privileged Accounts Inventory” Report through the Reports page in PVWA on a specific safe, which permission/s are required on that safe to show complete account inventory information?

  A. List Accounts, View Safe Members

  B. Manage Safe Owners

  C. List Accounts, Access Safe without confirmation

  D. Manage Safe, View Audit

  Correct Answer: A

• Question 40:

  Which PTA sensors are required to detect suspected credential theft?

  A. Logs, Vault Logs

  B. Logs, Network Sensor, Vault Logs

  C. Logs, PSM Logs, CPM Logs

  D. Logs, Network Sensor, EPM

  Correct Answer: A