CyberArk CyberArk Certifications CAU201 Questions & Answers

• Question 51:

  You have been asked to identify the up or down status of Vault services.

  Which CyberArk utility can you use to accomplish this task?

  A. Vault Replicator

  B. PAS Reporter

  C. Remote Control Agent

  D. Syslog

  Correct Answer: C

• Question 52:

  You are logging into CyberArk as the Master user to recover an orphaned safe.

  Which items are required to log in as Master?

  A. Master CD, Master Password, console access to the Vault server, Private Ark Client

  B. Operator CD, Master Password, console access to the PVWA server, PVWA access

  C. Operator CD, Master Password, console access to the Vault server, Recover.exe

  D. Master CD, Master Password, console access to the PVWA server, Recover.exe

  Correct Answer: A

• Question 53:

  Which certificate type do you need to configure the vault for LDAP over SSL?

  A. the CA Certificate that signed the certificate used by the External Directory

  B. a CA signed Certificate for the Vault server

  C. a CA signed Certificate for the PVWA server

  D. a self-signed Certificate for the Vault

  Correct Answer: A

• Question 54:

  You are onboarding an account that is not supported out of the box.

  What should you do first to obtain a platform to import?

  A. Create a service ticket in the customer portal explaining the requirements of the custom platform.

  B. Search common community portals like stackoverflow, reddit, github for an existing platform.

  C. From the platforms page, uncheck the “Hide non-supported platforms” checkbox and see if a platform meeting your needs appears.

  D. Visit the CyberArk marketplace and search for a platform that meets your needs.

  Correct Answer: A

• Question 55:

  To ensure all sessions are being recorded, a CyberArk administrator goes to the master policy and makes configuration changes.

  Which configuration is correct?

  A. Require privileged session monitoring and isolation = inactive; Record and save session activity = active.

  B. Require privileged session monitoring and isolation = inactive; Record and save session activity = inactive.

  C. Require privileged session monitoring and isolation = active; Record and save session activity = active.

  D. Require privileged session monitoring and isolation = active; Record and save session activity = inactive.

  Correct Answer: C

• Question 56:

  An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?

  A. PSMConnect

  B. PSMMaster

  C. PSMGwUser

  D. PSMAdminConnect

  Correct Answer: D

• Question 57:

  Which CyberArk group does a user need to be part of to view recordings or live monitor sessions?

  A. Auditors

  B. Vault Admin

  C. DR Users

  D. Operators

  Correct Answer: A

• Question 58:

  What is the purpose of the PrivateArk Server service?

  A. Executes password changes

  B. Maintains Vault metadata

  C. Makes Vault data accessible to components

  D. Sends email alerts from the Vault

  Correct Answer: C

• Question 59:

  Select the best practice for storing the Master CD.

  A. Copy the files to the Vault server and discard the CD

  B. Copy the contents of the CD to a Hardware Security Module (HSM) and discard the CD

  C. Store the CD in a secure location, such as a physical safe

  D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder secured with NTFS permissions on the Vault

  Correct Answer: D

• Question 60:

  A user is receiving the error message "ITATS006E Station is suspended for User jsmith" when attempting to sign into the Password Vault Web Access (PVWA). Which utility would a Vault administrator use to correct this problem?

  A. createcredfile.exe

  B. cavaultmanager.exe

  C. PrivateArk

  D. PVWA

  Correct Answer: C