CyberArk CAU201 Online Practice Questions and Exam Preparation

CyberArk CAU201 Online Questions & Answers

• Question 41:

  If a user is a member of more than one group that has authorizations on a safe, by default that user is granted________.

  A. the vault will not allow this situation to occur.
  B. only those permissions that exist on the group added to the safe first.
  C. only those permissions that exist in all groups to which the user belongs.
  D. the cumulative permissions of all groups to which that user belongs.
  B. only those permissions that exist on the group added to the safe first.

• Question 42:

  It is possible to control the hours of the day during which a user may log into the vault.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 43:

  A Logon Account can be specified in the Master Policy.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 44:

  Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that apply.

  A. PAR Agent
  B. PrivateArk Server Central Administration
  C. Edit DBParm.ini in a text editor.
  D. Setup.exe
  A. PAR Agent
  B. PrivateArk Server Central Administration

• Question 45:

  The vault supports Subnet Based Access Control.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 46:

  A newly created platform allows users to access a Linux endpoint. When users click to connect, nothing happens. Which piece of the platform is missing?

  A. PSM-SSH Connection Component
  B. UnixPrompts.ini
  C. UnixProcess.ini
  D. PSM-RDP Connection Component
  A. PSM-SSH Connection Component

• Question 47:

  What is the primary purpose of Dual Control?

  A. Reduced risk of credential theft
  B. More frequent password changes
  C. Non-repudiation (individual accountability)
  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.
  D. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

• Question 48:

  One can create exceptions to the Master Policy based on ____________________.

  A. Safes
  B. Platforms
  C. Policies
  D. Accounts
  D. Accounts

• Question 49:

  Which of the following statements are NOT true when enabling PSM recording for a target Windows server? (Choose all that apply)

  A. The PSM software must be instated on the target server
  B. PSM must be enabled in the Master Policy (either directly, or through exception)
  C. PSMConnect must be added as a local user on the target server
  D. RDP must be enabled on the target server
  A. The PSM software must be instated on the target server
  B. PSM must be enabled in the Master Policy (either directly, or through exception)

• Question 50:

  You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe Team1. What do you need to recover and decrypt the object? (Choose three.)

  A. Recovery Private Key
  B. Recover.exe
  C. Vault data
  D. Recovery Public Key
  E. Server Key
  F. Master Password
  A. Recovery Private Key
  D. Recovery Public Key
  E. Server Key