CyberArk CyberArk Certifications CAU201 Questions & Answers

• Question 61:

  Which service should NOT be running on the DR Vault when the primary Production Vault is up?

  A. PrivateArk Database

  B. PrivateArk Server

  C. CyberArk Vault Disaster Recovery (DR) service

  D. CyberArk Logical Container

  Correct Answer: B

• Question 62:

  Which user is automatically added to all Safes and cannot be removed?

  A. Auditor

  B. Administrator

  C. Master

  D. Operator

  Correct Answer: C

• Question 63:

  What is the purpose of the PrivateArk Database service?

  A. Communicates with components

  B. Sends email alerts from the Vault

  C. Executes password changes

  D. Maintains Vault metadata

  Correct Answer: D

• Question 64:

  PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

  A. True

  B. False, the PTA can suspend sessions whether the session is made via the PSM or not

  Correct Answer: B

• Question 65:

  What is the purpose of the CyberArk Event Notification Engine service?

  A. It sends email messages from the Central Policy Manager (CPM)

  B. It sends email messages from the Vault

  C. It processes audit report messages

  D. It makes Vault data available to components

  Correct Answer: D

• Question 66:

  When a DR Vault Server becomes an active vault, it will automatically fail back to the original state once the Primary Vault comes back online.

  A. True; this is the default behavior

  B. False; this is not possible

  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file

  D. True, if the AllowFailback setting is set to "yes" in the dbparm.ini file

  Correct Answer: B

• Question 67:

  What is the purpose of the password change process?

  A. To test that CyberArk is storing accurate credentials for accounts

  B. To change the password of an account according to organizationally defined password rules

  C. To allow CyberArk to manage unknown or lost credentials

  D. To generate a new complex password

  Correct Answer: B

• Question 68:

  Which of these accounts onboarding methods is considered proactive?

  A. Accounts Discovery

  B. Detecting accounts with PTA

  C. A Rest API integration with account provisioning software

  D. A DNA scan

  Correct Answer: B

• Question 69:

  Which of the following components can be used to create a tape backup of the Vault?

  A. Disaster Recovery

  B. Distributed Vaults

  C. Replicate

  D. High Availability

  Correct Answer: C

• Question 70:

  Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)

  A. Store the CD in a physical safe and mount the CD every time Vault maintenance is performed

  B. Copy the entire contents of the CD to the system Safe on the Vault

  C. Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions

  D. Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions

  Correct Answer: ACD