CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 111:

  Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

  A. Password change

  B. Password reconciliation

  C. Session suspension

  D. Session termination

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/Security- Configuration.htm

• Question 112:

  Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?

  A. dbparm.ini

  B. PARagent.ini

  C. ENEConf.ini

  D. padre.ini

  Correct Answer: A

• Question 113:

  How does the Vault administrator apply a new license file?

  A. Upload the license.xml file to the system Safe and restart the PrivateArk Server service.

  B. Upload the license.xml file to the system Safe.

  C. Upload the license.xml file to the Vault Internal Safe and restart the PrivateArk Server service.

  D. Upload the license.xml file to the Vault Internal Safe.

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.1/en/Content/PASIMP/Managing-the- CyberArk-License.htm

• Question 114:

  The DR module allows an integration with Enterprise Backup software.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 115:

  Multiple PVWA servers can be load balanced.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 116:

  A Logon Account can be specified in the Master Policy

  A. TRUE

  B. FALSE

  Correct Answer: B

  Nowhere in the master policy can you choose a logon account to use. It wouldn't make sense even, as different logon accounts are used for different systems, and master policy applies to all platforms regardless to which system it is used.

  All available master policy settings can be found here: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Working-with-Master-Policy-Rules.htm

• Question 117:

  If a user is a member of more than one group that has authorizations on a safe, by default that user is granted __________________.

  A. the vault will not allow this situation to occur.

  B. only those permissions that exist on the group added to the safe first.

  C. only those permissions that exist in all groups to which the user belongs.

  D. the cumulative permissions of all the groups to which that user belongs

  Correct Answer: D

  It is not only permissions of the first added group. Also, combination of authorizations can be adopted by users who belongs to several groups inside a safe

• Question 118:

  After the Vault Server is installed, the Microsoft Windows Firewall is now commandeered by the Vault Can the administrator change these firewall rules?

  A. Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the vault

  B. Yes, the administrator can still modify Firewall rules via the Windows Firewall interface

  C. No, the Vault does not permit any changes to the Firewall due to security requirements

  D. Yes, but the administrator can only modify the firewall rules by editing the FirewallRuIes mi file and the restarting the vault

  Correct Answer: A

• Question 119:

  Which report shows the accounts that are accessible to each user?

  A. Activity Report

  B. Entitlement Report

  C. Privileged Accounts Compliance Status Report

  D. Applications Inventory Report

  Correct Answer: B

• Question 120:

  What values are acceptable in the address field on the Accounts Details?

  A. It must be a fully qualified domain name (FQDN)

  B. It must be an IP address

  C. It must be NetBIOS name

  D. Any name that is resolvable on the CPM server is acceptable

  Correct Answer: D