CyberArk CAU201 Online Practice Questions and Exam Preparation

CyberArk CAU201 Online Questions & Answers

• Question 51:

  The Password upload utility can be used to create safes.

  A. TRUE
  B. FALS
  A. TRUE

• Question 52:

  As long as you are a member of the Vault Admins group you can grant any permission on any safe.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 53:

  A new domain controller has been added to your domain. You need to ensure the CyberArk infrastructure can use the new domain controller for authentication. Which locations must you update?

  A. on the Vault server in Windows\System32\Etc\Hosts and in the PVWA Application under Administration > LDAP Integration > Directories > Hosts
  B. on the Vault server in Windows\System32\Etc\Hosts and on the PVWA server in Windows\System32\Etc\Hosts
  C. in the Private Ark client under Tools > Administrative Tools > Directory Mapping
  D. on the Vault server in the certificate store and on the PVWA server in the certificate store
  C. in the Private Ark client under Tools > Administrative Tools > Directory Mapping

• Question 54:

  Users can be resulted to using certain CyberArk interfaces (e.g.PVWA or PACLI).

  A. TRUE
  B. FALS
  A. TRUE

• Question 55:

  You receive this error:

  "Error in changepass to user domain\user on domain server(\domain.(winRc=5) Access is denied."

  Which root cause should you investigate?

  A. The account does not have sufficient permissions to change its own password.
  B. The domain controller is unreachable.
  C. The password has been changed recently and minimum password age is preventing the change.
  D. The CPM service is disabled and will need to be restarted.
  A. The account does not have sufficient permissions to change its own password.

• Question 56:

  If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use to set the full or relative path of the SSH private key file that will be attached to the account?

  A. KeyPath
  B. KeyFile
  C. ObjectName
  D. Address
  B. KeyFile

• Question 57:

  Which report could show all accounts that are past their expiration dates?

  A. Privileged Account Compliance Status report
  B. Activity log
  C. Privileged Account Inventory report
  D. Application Inventory report
  A. Privileged Account Compliance Status report

• Question 58:

  Which permissions are needed for the Active Directory user required by the Windows Discovery process?

  A. Domain Admin
  B. LDAP Admin
  C. Read/Write
  D. Read
  D. Read

• Question 59:

  Due to network activity, ACME Corp's PrivateArk Server became active on the OR Vault while the Primary Vault was also running normally. All the components continued to point to the Primary Vault. Which steps should you perform to restore DR replication to normal?

  A. Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
  B. Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
  C. Shutdown PrivateArk Server on Primary Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
  D. Shutdown PrivateArk Server on DR Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
  A. Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

• Question 60:

  How does the Vault administrator apply a new license file?

  A. Upload the license.xml file to the system Safe and restart the PrivateArk Server service
  B. Upload the license.xml file to the system Safe
  C. Upload the license.xml file to the Vault Internal Safe and restart the PrivateArk Server service
  D. Upload the license.xml file to the Vault Internal Safe
  B. Upload the license.xml file to the system Safe