CyberArk Sentry CAU301 Questions & Answers

• Question 31:

  What is the PRIMARY reason for installing more than 1 active CPM?

  A. Installing CPMs in multiple sites prevents complex firewall rules to manage devices at remote sites.

  B. Multiple instances create fault tolerance.

  C. Multiple instances increase response time.

  D. Having additional CPMs increases the maximum number of devices CyberArk can manage

  Correct Answer: D

• Question 32:

  You are successfully managing passwords in the alpha cyberark com domain; however, when you attempt to manage a password in the beta cyberark com domain, you receive the 'network path not found' error. What should you check first?

  A. That the username and password are correct

  B. That the CPM can successfully resolve addresses in the beta cyberark com domain

  C. That the end user has the correct permissions on the safe.

  D. That an appropriate trust relationship exists between alpha.cyberark com and beta cyberark.com

  Correct Answer: D

• Question 33:

  In an SMTP integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SMTP server address(es)

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 34:

  The RemoteApp feature of PSM allows seamless Application windows (i e the Desktop of the PSM server will not be visible)

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 35:

  What is the best practice for storing the Master CD?

  A. Copy the files to the Vault server and discard the CD.

  B. Copy the contents of the CD to a Hardware Security Module and discard the CD.

  C. Store the CD in a secure location, such as a physical safe.

  D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions} on the vault.

  Correct Answer: D

• Question 36:

  Name two ways of viewing the ITAlog

  A. Log into the vault locally and navigate to the Server folder under the PrivateArk install location.

  B. Log into the PVWA and go to the Reports tab.

  C. Access the System Safe from the PrivateArk client.

  D. Go to the Thirdpary log directory on the CPM

  Correct Answer: C

• Question 37:

  After a PSM session is complete, the PSM server uploads the recording to the Vault for long-term storage.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 38:

  In a SIEM integration it is possible to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es)

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 39:

  Which of the following protocols need to be installed on a standalone vault server?

  A. Check all that apply

  B. Client for Microsoft Networks

  C. QoS Packet Scheduler

  D. File and Printer Sharing for Microsoft Networks

  E. Internet Protocol Version 4 (TCP/IPv4)

  F. NIC Teaming Driver, if applicable

  Correct Answer: D

• Question 40:

  When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.

  A. True, this is the default behavior

  B. False, this is not possible

  C. True, if the 'AllowFailback' setting is set to yes in the PADR.ini file.

  D. True if the 'AllowFailback' setting is set to yes in the dbparm mi file

  Correct Answer: A