CyberArk Sentry CAU301 Questions & Answers

• Question 11:

  What is the purpose of the password Reconcile process?

  A. To test that CyberArk is storing accurate credentials for accounts.

  B. To change the password of an account according to organizationally defined password rules

  C. To allow CyberArk to manage unknown or lost credentials.

  D. To generate a new complex password.

  Correct Answer: A

• Question 12:

  If a transparent user matches two different directory mappings, how does the system determine which user template to use?

  A. The system will use the template for the mapping listed first.

  B. The system will use the template for the mapping listed last.

  C. The system will grant all of the vault authorizations from the two templates.

  D. The system will grant only the vault authorizations that are listed in both templates

  Correct Answer: C

• Question 13:

  Does CyberArk need service accounts on each server to change passwords?

  A. Yes. it requires a domain administrator account to change any password on any server.

  B. Yes. it requires a local administrator account on any Windows server and a root level account on any Unix server.

  C. No. passwords are changed by the Password Provider Agent.

  D. No. the CPM uses the account information stored in the vault to login and change the account's password using its own credentials

  Correct Answer: B

• Question 14:

  To apply a new license file you must:

  A. Upload the license.xml file to the System Safe

  B. Upload the license.xml file to the Vaultlnternal Safe.

  C. Upload the license.xml file to the System Safe and restart the PrivateArk Server service.

  D. Upload the license.xml file to the Vaultlnternal Safe and restart the PrivateArk Server service.

  Correct Answer: D

• Question 15:

  Which file would you modify to configure the vault to send SNMP traps to your monitoring solution?

  A. dbparm ini

  B. paragent.ini

  C. ENEConf.ini I

  D. padr ini

  Correct Answer: A

• Question 16:

  The Remote Desktop Services role must be property licensed by Microsoft.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 17:

  By default, the vault secure protocol uses which IP port and protocol.

  A. TCP/1858

  B. TCP/443

  C. UDP/1858

  D. TCP/80

  Correct Answer: B

• Question 18:

  In order to retrieve data from the vault a user MUST use an interface provided by CyberArk.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 19:

  Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply

  A. Store the CD in a physical safe and mount the CD every time vault maintenance is performed.

  B. Copy the contents of the CD to the System Safe on the vault

  C. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.

  D. Store the server key in a Hardware Security Module.

  E. Store the server key in the Provider cache

  Correct Answer: E

• Question 20:

  Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

  A. Server Key

  B. Recovery Public Key

  C. Recovery Private Key

  D. Safe Key

  Correct Answer: C