CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 91:

  Is it possible to modify the CyberArk Vault Audit Log?

  A. Yes, a Vault administrator can modify the Audit log
  B. No, the audit trail is tamper proof and cannot be edited, not even by Master
  C. Yes, but only the Master user can modify the Audit log
  D. Yes, a Vault administrator can edit the Audit log but only with explicit permission from CyberArk
  B. No, the audit trail is tamper proof and cannot be edited, not even by Master

• Question 92:

  In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault.

  A. True.
  B. False. Because the user can also enter credentials manually using Secure Connect.
  C. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSMConnect.
  D. False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.
  B. False. Because the user can also enter credentials manually using Secure Connect.

  ---

  Explanation/Reference:

  Can connect with Ad Hoc( previously Secure Connect) without storing credentials in vault.

• Question 93:

  Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

  A. Server Key
  B. Recovery Public Key
  C. Recovery Private Key
  D. Safe Key
  A. Server Key
  B. Recovery Public Key

  ---

  Explanation/Reference:

  Reference:https://www.reddit.com/r/CyberARk/comments/8s96n8/certificat_problem_with_ my_vault/

• Question 94:

  A SIEM integration is a powerful way to correlate Privileged Account Usage with Privileged Account Activity.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 95:

  How does the Vault administrator configure the CyberArk Disaster Recovery (DR) solution to perform automatic failover in case of failure in the Primary Vault?

  A. By setting "EnableFailover=yes" in the padr.ini file
  B. By setting "EnableFailover=yes" in the dbparm.ini file
  C. By setting "FailoverMode=yes" in the padr.ini file
  D. By setting "FailoverMode=yes" in the dbparm.ini file
  A. By setting "EnableFailover=yes" in the padr.ini file

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Distributed- Vaults-during-Vault- Failure.htm#_Ref462652176

• Question 96:

  During the process of installing the Central Policy Manager (CPM), the Vault administrator will be asked to provide the credentials for an administrative user in the Vault. For which purpose are these credentials used?

  A. The credentials will be used later by the CPM to retrieve passwords from the Vault.
  B. The credentials are used by the installer to register the CPM in the CyberArk database.
  C. The credentials are used by the installer to authenticate to the Vault and create the Central Policy Manager (CPM) environment (Safes, users, etc.).
  D. The credentials will be used later by the CPM to update passwords in the Vault.
  C. The credentials are used by the installer to authenticate to the Vault and create the Central Policy Manager (CPM) environment (Safes, users, etc.).

• Question 97:

  Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?

  A. dbparm.ini
  B. PARagent.ini
  C. ENEConf.ini
  D. padre.ini
  A. dbparm.ini

• Question 98:

  Which Master Policy?

  A. Password Expiration Time
  B. Enabling and Disabling of the Connection Through the PSM
  C. Password Complexity
  D. The use of "One-Time-Passwords"
  C. Password Complexity

• Question 99:

  Multiple PSM Servers can be load balanced.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Installing-PSM-in-a-Load-Balancing-Environment.htm

• Question 100:

  Which parameter controls how often the CPM looks for Exclusive Passwords that need to be changed?

  A. HeadStartInterval
  B. Interval
  C. ImmediateInterval
  D. The CPM does not change the password under this circumstance
  B. Interval

  ---

  Explanation/Reference: