CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 91:

  In order to connect to a target device through PSM. the account credentials used for the connection must be stored in the vault?

  A. True

  B. False. Because the user can also enter credentials manually using Secure Connect

  C. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSMConnect.

  D. False Because if credentials are not stored in the vault, the PSM will prompt for credentials

  Correct Answer: B

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Connecting-with-Secure-Connect.htm

  "Then you specify the address of the remote machine, and the user name and password that are required to log on, but which are not managed in the Vault."

• Question 92:

  When managing SSH keys. CPM automatically pushes the Private Key to all systems that use it.

  A. TRUE

  B. FALSE

  Correct Answer: B

  A single SSH Key can be used to access multiple target systems. The same “public key” is distributed to each target system where a privileged account can be authenticated using the same SSH Key. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing%20SSH%20Keys.htm

• Question 93:

  Which Master Policy Setting(s) must be active in order to have an account checked-out by one user for a predetermined amount of time?

  A. Require dual control password access Approval

  B. Enforce check-in/check-out exclusive access

  C. Enforce one-time password access

  D. Enforce check-in/check-out exclusive access and Enforce one-time password access

  Correct Answer: D

  To achieve automatic release of locked passwords and full personal accountability, enable this rule along with the Enforce one-time password access rule. https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-master-policy-rules.htm#Enforce

• Question 94:

  tsparm.ini is the main configuration file for the vault.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 95:

  When working with the CyberArk High Availability Cluster, which services are running on the passive node?

  A. Cluster Vault Manager and PrivateArk Database

  B. Cluster Vault Manager, PrivateArk Database and Remote Control Agent

  C. Cluster Vault Manager

  D. Cluster Vault Manager and Remote Control Agent

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/ Installing-the-CyberArk-Digital- Cluster-Vault-Server-in-an-HA-Environment-on-Windows-2012.htm

• Question 96:

  What are the chief benefits of PSM? Choose all that apply?

  A. Privileged Session Isolation

  B. Automatic Password Management

  C. Privileged Session Recording

  D. A and C

  Correct Answer: D

• Question 97:

  What is the name of the Platform parameter that determines the amount of time a person is allowed to use a One Time Password?

  A. MinValidityPeriod

  B. Interval

  C. ImmediateInterval

  D. Timeout

  Correct Answer: A

  MinValidityPeriod:The number of minutes to wait from the last retrieval of the password until it is replaced. This gives the user a minimum period to be able to use the password before it is replaced. Use -1 to ignore this property. This parameter is also used to release exclusive accounts automatically.

• Question 98:

  Where do you configure in PVWA the fully-qualified domain name (FQDN) of your target email server during SMTP integration?

  A. PVWA > Platform Management > Notification Settings

  B. PVWA > Options > Notification Settings

  C. PVWA > Administration > Notification Settings

  D. PVWA > LDAP Integartion > Notification Settings

  Correct Answer: C

• Question 99:

  Which report could show all accounts that are past their expiration dates?

  A. Activity log

  B. Privileged Account Inventory report

  C. Privileged Account Compliance Status report

  D. Applications Inventory report

  Correct Answer: C

• Question 100:

  What conditions must be met in order to log into the vault as the Master user? Select all that apply

  A. Logon must be originated from the console of the Vault server or an EmergencyStation defined in DBParm.ini

  B. User must provide the correct master password

  C. Logon requires the Recovery Private Key to be accessible to the vault

  D. Logon must satisfy a challange response request

  Correct Answer: ABC