CyberArk CAU201 Online Practice Questions and Exam Preparation

CyberArk CAU201 Online Questions & Answers

• Question 61:

  DRAG DROP

  For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

  Select and Place:

  

  

• Question 62:

  Which PTA sensors are required to detect suspected credential theft?

  A. Logs, Vault Logs
  B. Logs, Network Sensor, Vault Logs
  C. Logs, PSM Logs, CPM Logs
  D. Logs, Network Sensor, EPM
  A. Logs, Vault Logs

• Question 63:

  An auditor initiates a live monitoring session to PSM server to view an ongoing live session. When the auditor's machine makes an RDP connection the PSM server, which user will be used?

  A. PSMAdminConnect
  B. Shadowuser
  C. PSMConnect
  D. Credentials stored in the Vault for the target machine
  A. PSMAdminConnect

• Question 64:

  When a group is granted the 'Authorize Account Requests' permission on a safe Dual Control requests must be approved by

  A. Any one person from that group
  B. Every person from that group
  C. The number of persons specified by the Master Policy
  D. That access cannot be granted to groups
  C. The number of persons specified by the Master Policy

• Question 65:

  Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)

  A. Store the CD in a physical safe and mount the CD every time Vault maintenance is performed
  B. Copy the entire contents of the CD to the system Safe on the Vault
  C. Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions
  D. Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions
  A. Store the CD in a physical safe and mount the CD every time Vault maintenance is performed
  C. Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions
  D. Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions

• Question 66:

  Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?

  A. Yes, when using the connect button, CyberArk uses the PMTerminal.exe process which bypasses the root SSH restriction.
  B. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.
  C. Yes, if a logon account is associated with the root account.
  D. No, it is not possible.
  B. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.

• Question 67:

  Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

  A. Require dual control password access Approval
  B. Enforce check-in/check-out exclusive access
  C. Enforce one-time password access
  D. Enforce check-in/check-out exclusive access and Enforce one-time password access
  B. Enforce check-in/check-out exclusive access

• Question 68:

  tsparm.ini is the main configuration file for the Vault.

  A. True
  B. False
  B. False

• Question 69:

  The Vault administrator can change the Vault license by uploading the new license to the system Safe.

  A. True
  B. False
  A. True

• Question 70:

  Which option in the Private Ark client is used to update users' Vault group memberships?

  A. Update > General tab
  B. Update > Authorizations tab
  C. Update > Member Of tab
  D. Update > Group tab
  A. Update > General tab