CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 101:

  The vault supports Subnet Based Access Control.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 102:

  Which of these accounts onboarding methods is considered proactive?

  A. Accounts Discovery
  B. Detecting accounts with PTA
  C. A Rest API integration with account provisioning software
  D. A DNA scan
  C. A Rest API integration with account provisioning software

  ---

  Explanation/Reference:

• Question 103:

  Users complain they are unsuccessful attempting to authenticate to the PVWA web site.

  After entering their credentials, they receive a "Timeout has expired". You test the URL using multiple browsers and receive the same error. The CyberArk.WebApplication.log shows the "ITACM012S Timeout has expired" log entry.

  What is the next troubleshooting step you should take?

  A. Run an IISRESET on the PVWA server
  B. Check the CyberArk.WebConsole.log for errors
  C. Check network firewall rules to ensure the PVWA can communicate to the Vault over tcp_1858
  D. Check the health of the Vault Server and ensure all services are running
  C. Check network firewall rules to ensure the PVWA can communicate to the Vault over tcp_1858

  ---

  Explanation/Reference:

• Question 104:

  Which report could show all accounts that are past their expiration dates?

  A. Activity log
  B. Privileged Account Inventory report
  C. Privileged Account Compliance Status report
  D. Applications Inventory report
  C. Privileged Account Compliance Status report

• Question 105:

  CyberArk creates exceptions for Data Execution Prevention (DEP) on selected executable files. This is done as part of installing, which of the following components?

  A. PSM
  B. CPM
  C. PVWA
  D. AAM Credential Provider (previously known as AIM Credential Provider)
  B. CPM

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/ Following-Central-Policy-Manager- Installation.htm

• Question 106:

  Within the Vault each password is encrypted by:

  A. The Server Key
  B. The Recovery Public Key
  C. The Recovery Private key
  D. Its own unique key.
  D. Its own unique key.

  ---

  Explanation/Reference:

  Every password object has it's own file key. This is encrypted with the safe key. This server key is encrypted with both the recovery public key and with the server key.

• Question 107:

  CyberArk Logical Container.

  A. CPMLOG
  B. CPM_errorlog
  C. pmlog
  D. pm errors log
  C. pmlog

  ---

  Explanation/Reference:

• Question 108:

  What values are acceptable in the address field on the Accounts Details?

  A. It must be a fully qualified domain name (FQDN)
  B. It must be an IP address
  C. It must be NetBIOS name
  D. Any name that is resolvable on the CPM server is acceptable
  D. Any name that is resolvable on the CPM server is acceptable

  ---

  Explanation/Reference:

• Question 109:

  How does the Vault administrator apply a new license file?

  A. Upload the license.xml file to the system Safe and restart the PrivateArk Server service.
  B. Upload the license.xml file to the system Safe.
  C. Upload the license.xml file to the Vault Internal Safe and restart the PrivateArk Server service.
  D. Upload the license.xml file to the Vault Internal Safe.
  B. Upload the license.xml file to the system Safe.

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.1/en/Content/PASIMP/Managing-the- CyberArk-License.htm

• Question 110:

  What is the process to remove object level access control from a Safe?

  A. Uncheck the 'Enable Object Level Access Control' on the Safe Details page in the PVWA.
  B. Uncheck the 'Enable Object Level Access Control' box in the Safe Properties in PrivateArk.
  C. This cannot be done.
  D. Remove all ACLs from the Safe.
  C. This cannot be done.

  ---

  Explanation/Reference: