CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 131:

  When on-boarding accounts using Accounts Feed. Which of the following is true?

  A. You must specify an existing Safe where the account will be stored when it is on- boarded to the Vault.

  B. You can specify the name of a new safe that will be created where the account will be stored when it is on-boarded to the Vault.

  C. You can specify the name of a new Platform that will be created and associated with the account.

  D. Any account that is on-boarded can be automatically reconciled regardless of the platform it is associated with

  Correct Answer: B

• Question 132:

  When the PSM Gateway (also known as the HTML5 Gateway) is implemented, users must have an RDP client, such as MSTSC, installed on their endpoint in order to launch connections via the PSM.

  A. True

  B. False. When the PSM Gateway is implemented, the user only requires a browser in order launch a connection via the PSM.

  Correct Answer: B

• Question 133:

  Which of the following are secure options for storing the contents of the Operator CD. while still allowing the contents to be accessible upon a planned Vault restart? Choose alt that apply

  A. Store the CD in a physical safe and mount the CD every time vault maintenance is performed.

  B. Copy the contents of the CD to the System Safe on the vault

  C. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.

  D. Store the server key in a Hardware Security Module.

  E. Store the server key in the Provider cache

  Correct Answer: ACD

• Question 134:

  After the Vault server is installed, the Microsoft Windows firewall is now commandeered by the Vault. Can the administrator change these firewall rules?

  A. Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the Vault.

  B. Yes, the administrator can still modify firewall rules via the Windows firewall interface.

  C. No, the Vault does not permit any changes to the firewall due to security requirements.

  D. Yes, but the administrator can only modify the firewall rules by editing the FirewallRules.ini file and the restarting the Vault.

  Correct Answer: A

• Question 135:

  For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure access a password without approval?

  A. Create an exception to the Master Policy to exclude the group from the workflow process.

  B. Edit the master policy rule and modify the advanced 'Access safe without approval' rule to include the group.

  C. On the safe in which the account is stored grant the group the 'Access safe without audit' authorization.

  D. On the safe in which the account is stored grant the group the 'Access safe without confirmation' authorization

  Correct Answer: D

• Question 136:

  Which user is automatically given all Safe authorizations on all Safes?

  A. Administrator

  B. Master

  C. Auditor

  D. Operator

  Correct Answer: B

• Question 137:

  What is the purpose of the PrivateArk Server service?

  A. Executes password changes.

  B. Makes vault data accessible to components.

  C. Maintains vault metadata.

  D. Sends email alert from the Vault

  Correct Answer: B

• Question 138:

  Which file is used to integrate the Vault with your Radius server?

  A. radius.ini

  B. paragent ini

  C. ENEConf.ini

  D. dbparm.ini

  Correct Answer: D

  Reference: https://docs.secureauth.com/pages/viewpage.action?pageId=40045055

• Question 139:

  What is the primary purpose of One Time Passwords?

  A. Reduced risk of credential theft

  B. More frequent password changes

  C. Non-repudiation (individual accountability)

  D. To force a `collusion to commit' fraud ensuring no single actor may use a password without authorization

  Correct Answer: A

• Question 140:

  Which of the following is considered a prerequiste for installing PSM?

  A. IIS Web Services Role

  B. HTML5 Gateway

  C. Provider

  D. Remote Desktop Services

  Correct Answer: D