CyberArk CyberArk Certifications CAU201 Questions & Answers

• Question 81:

  Which keys are required to be present in order to start the PrivateArk Server service?

  A. Recovery public key

  B. Recovery private key

  C. Server key

  D. Safe key

  Correct Answer: AC

• Question 82:

  Which of the following Privileged Session Management (PSM) solutions support live monitoring of active sessions?

  A. PSM (i.e., launching connections by clicking on the connect button in the Password Vault Web Access (PVWA)

  B. PSM for Windows (previously known as RDP Proxy)

  C. PSM for SSH (previously known as PSM-SSH Proxy)

  D. All of the above

  Correct Answer: D

• Question 83:

  Within the Vault each password is encrypted by:

  A. the server key

  B. the recovery public key

  C. the recovery private key

  D. its own unique key

  Correct Answer: D

• Question 84:

  Which of the following logs contains information about errors related to PTA?

  A. ITAlog.log

  B. diamond.log

  C. pm_error.log

  D. WebApplication.log

  Correct Answer: B

• Question 85:

  An auditor initiates a live monitoring session to PSM server to view an ongoing live session. When the auditor's machine makes an RDP connection the PSM server, which user will be used?

  A. PSMAdminConnect

  B. Shadowuser

  C. PSMConnect

  D. Credentials stored in the Vault for the target machine

  Correct Answer: A

• Question 86:

  What is the chief benefit of PSM?

  A. Privileged session isolation

  B. Automatic password management

  C. Privileged session recording

  D. `Privileged session isolation' and `Privileged session recording'

  Correct Answer: C

• Question 87:

  A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

  A. True

  B. False

  Correct Answer: B

• Question 88:

  CyberArk recommends implementing object level access control on all Safes.

  A. True

  B. False

  Correct Answer: B

• Question 89:

  Which is the primary purpose of exclusive accounts?

  A. Reduced risk of credential theft

  B. More frequent password changes

  C. Non-repudiation (individual accountability)

  D. To force a `collusion to commit' fraud ensuring no single actor may use a password without authorization

  Correct Answer: C

• Question 90:

  A Vault administrator have associated a logon account to one of their Unix root accounts in the vault. When attempting to verify the root account's password the Central Policy Manager (CPM) will:

  A. ignore the logon account and attempt to log in as root

  B. prompt the end user with a dialog box asking for the login account to use

  C. log in first with the logon account, then run the SU command to log in as root using the password in the Vault

  D. none of these

  Correct Answer: B