CyberArk CAU201 Online Practice Questions and Exam Preparation

CyberArk CAU201 Online Questions & Answers

• Question 81:

  The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys. How are these keys managed?

  A. CyberArk stores Private keys in the Vault and updates Public keys on target systems.
  B. CyberArk stores Public keys in the Vault and updates Private keys on target systems.
  C. CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.
  D. CyberArk stores both Private and Public keys and can update target systems with either key.
  A. CyberArk stores Private keys in the Vault and updates Public keys on target systems.

• Question 82:

  Which of the Following can be configured in the Master Poky? Choose all that apply.

  A. Dual Control
  B. One Time Passwords
  C. Exclusive Passwords
  D. Password Reconciliation
  E. Ticketing Integration
  F. Required Properties
  G. Custom Connection Components
  H. Password Aging Rules
  A. Dual Control
  B. One Time Passwords
  C. Exclusive Passwords
  H. Password Aging Rules

• Question 83:

  For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

  A. Create an exception to the Master Policy to exclude the group from the workflow process.
  B. Edith the master policy rule and modify the advanced' Access safe without approval' rule to include the group.
  C. On the safe in which the account is stored grant the group the' Access safe without audit' authorization.
  D. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization.
  D. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization.

• Question 84:

  Accounts Discovery allows secure connections to domain controllers.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 85:

  What is the purpose of the HeadStartlnterval setting m a platform?

  A. It determines how far in advance audit data is collected tor reports
  B. It instructs the CPM to initiate the password change process X number of days before expiration.
  C. It instructs the AIM Provider to `skip the cache' during the defined time period
  D. It alerts users of upcoming password changes x number of days before expiration.
  B. It instructs the CPM to initiate the password change process X number of days before expiration.

• Question 86:

  A user with administrative privileges to the vault can only grant other users privileges that he himself has.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 87:

  PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

  A. True
  B. False, the PTA can suspend sessions whether the session is made via the PSM or not
  B. False, the PTA can suspend sessions whether the session is made via the PSM or not

• Question 88:

  Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

  A. Accounts Discovery
  B. Auto Detection
  C. Onboarding RestAPI functions
  D. PTA Rules
  B. Auto Detection

• Question 89:

  A logon account can be specified in the platform settings.

  A. True
  B. False
  A. True

• Question 90:

  What is the purpose of the Immediate Interval setting in a CPM policy?

  A. To control how often the CPM looks for System Initiated CPM work.
  B. To control how often the CPM looks for User Initiated CPM work.
  C. To control how often the CPM rests between password changes.
  D. To Control the maximum amount of time the CPM will wait for a password change to complete.
  B. To control how often the CPM looks for User Initiated CPM work.