CyberArk Defender CAU201 Questions & Answers

• Question 41:

  Which CyberArk utility allows you to create lists of Master Policy Settings, owners and safes for output to text files or MSSQL databases?

  A. Export Vault Data

  B. Export Vault Information

  C. PrivateArk Client

  D. Privileged Threat Analytics

  Correct Answer: A

• Question 42:

  A newly created platform allows users to access a Linux endpoint. When users click to connect, nothing happens.

  Which piece of the platform is missing?

  A. PSM-SSH Connection Component

  B. UnixPrompts.ini

  C. UnixProcess.ini

  D. PSM-RDP Connection Component

  Correct Answer: A

• Question 43:

  A Vault Administrator team member can log in to CyberArk, but for some reason, is not given Vault Admin rights.

  Where can you check to verify that the Vault Admins directory mapping points to the correct AD group?

  A. PVWA > User Provisioning > LDAP Integration > Mapping Criteria

  B. PVWA > User Provisioning > LDAP Integration > Map Name

  C. PVWA > Administration > LDAP Integration > Mappings

  D. PVWA > Administration > LDAP Integration > AD Groups

  Correct Answer: C

• Question 44:

  In your organization the “click to connect” button is not active by default. How can this feature be activated?

  A. Policies > Master Policy > Allow EPV transparent connections > Inactive

  B. Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception

  C. Policies > Master Policy > Allow EPV transparent connections > Active

  D. Policies > Master Policy > Password Management

  Correct Answer: C

• Question 45:

  In the screenshot displayed, you just configured the usage in CyberArk and want to update its password. What is the least intrusive way to accomplish this?

  A. Use the “change” button on the usage's details page.

  B. Use the “change” button on the parent account's details page.

  C. Use the “sync” button on the usage's details page.

  D. Use the “reconcile” button on the parent account's details page.

  Correct Answer: B

• Question 46:

  What is the configuration file used by the CPM scanner when scanning UNIX/Linux devices?

  A. UnixPrompts.ini

  B. plink.exe

  C. dbparm.ini

  D. PVConfig.xml

  Correct Answer: A

• Question 47:

  You have been asked to secure a set of shared accounts in CyberArk whose passwords will need to be used by end users. The account owner wants to be able to track who was using an account at any given moment. Which security configuration should you recommend?

  A. Configure one-time passwords for the appropriate platform in Master Policy.

  B. Configure shared account mode on the appropriate safe.

  C. Configure both one-time passwords and exclusive access for the appropriate platform in Master Policy.

  D. Configure object level access control on the appropriate safe.

  Correct Answer: D

• Question 48:

  You have been asked to turn off the time access restrictions for a safe. Where is this setting found?

  A. PrivateArk

  B. RestAPI

  C. Password Vault Web Access (PVWA)

  D. Vault

  Correct Answer: A

• Question 49:

  To enable the Automatic response “Add to Pending” within PTA when unmanaged credentials are found, what are the minimum permissions required by PTAUser for the PasswordManager_pending safe?

  A. List Accounts, View Safe members, Add accounts (includes update properties), Update Account content, Update Account properties

  B. List Accounts, Add accounts (includes update properties), Delete Accounts, Manage Safe

  C. Add accounts (includes update properties), Update Account content, Update Account properties, View Audit

  D. View Accounts, Update Account content, Update Account properties, Access Safe without confirmation, Manage Safe, View Audit

  Correct Answer: A

• Question 50:

  Your organization requires all passwords be rotated every 90 days. Where can you set this regulatory requirement?

  A. Master Policy

  B. Safe Templates

  C. PVWAConfig.xml

  D. Platform Configuration

  Correct Answer: A