CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 121:

  Which file is used to open up a non-standard Firewall port to the Vault?

  A. dbparm.ini

  B. PARagent.ini

  C. passparm.ini

  D. Vault.ini

  Correct Answer: A

  AllowNonStandardFWAddresses is in https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASREF/DBParm.ini.htm Not in : https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PACLI/Vault-Parameter-File.htm

• Question 122:

  If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

  A. Configure the Provider to change the password to match the Vault's Password

  B. Associate a reconcile account and configure the platform to reconcile automatically

  C. Associate a logon account and configure the platform to reconcile automatically

  D. Run the correct auto detection process to rediscover the password

  Correct Answer: B

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.4/en/Content/PASIMP/Reconciling-Passwords.htm

• Question 123:

  Any user can monitor live sessions in real time when initiating RDP connection via Secure Connect through PSM.

  A. True

  B. False

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring- the-Privileged-Session- Management-Interface.htm

• Question 124:

  When planning to load balance at least 2 PSM Servers in an "in-domain" deployment, is it required to move the PSMConnect and PSMAdminConnect users to the domain level?

  A. Yes. but only the PSMConnect user must be moved to the domain.

  B. No. this is the customers decision and will work with local or domain based users.

  C. Yes, both PSMConnect and PSMAdminConnect users should be moved to the domain

  D. No. both accounts must be left as local accounts.

  Correct Answer: B

  They can be left local but can be moved to the domain level if required. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Optional-Moving-the-PSMConnec-and-PSMAdminConnect-users-to-your-Domain.htm

• Question 125:

  Ad-Hoc Access (formerly Secure Connect) provides the following features. (Choose all that apply.)

  A. PSM connections to target devices that are not managed by CyberArk

  B. Session Recording

  C. Real-time live session monitoring

  D. PSM connections from a terminal without the need to login to the PVWA

  Correct Answer: ABC

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Connecting-with-Secure-Connect.htm?TocPath=End%20User%7CConnect%20to%20Accounts%7C_____2

• Question 126:

  The vault provides a tamper-proof audit trail.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 127:

  Which report could show all audit data in the vault?

  A. Privileged Account Compliance Status Report

  B. Activity Log

  C. Privileged Account Inventory Report

  D. Application Inventory Report

  Correct Answer: B

  A log of all the activities that have taken place in the Safes. This report can be filtered according to user, target system, specified period, and a variety of other criteria.

  Authorized users can view a list of changes that have been made in the Master Policy by generating an Activities report. This includes changes made in Master Policy rules, as well as adding, modifying, and deleting exceptions.

• Question 128:

  When working with the CyberArk Cluster, the Virtual IP is used by:

  A. The CyberArk components to communicate with the Vault Cluster over the public network.

  B. The Vault nodes for exchanging keep alive messages over the public network.

  C. The CyberArk components to communicate with the Vault Cluster over the private network.

  D. The Vault nodes for exchanging keep alive messages over the public network.

  Correct Answer: A

• Question 129:

  Which type of automatic remediation can be performed by the PTA in case of a Suspecious Password Change security event?

  A. Password Change

  B. Password Reconcilation

  C. Session Suspension

  D. Session Terminiation

  Correct Answer: A

• Question 130:

  Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the target email server during Simple Mail Transfer Protocol (SMTP) integration?

  A. PVWA > Platform Management > Notification Settings

  B. PVWA > Options > Notification Settings

  C. PVWA > Administration > Notification Settings

  D. PVWA > LDAP Integration > Notification Settings

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring- Email-Notification.htm