CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 141:

  As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 142:

  PSM for SSH (previously known as "PSM SSH Proxy") supports connections to the following target systems:

  A. Windows

  B. UNIX

  C. Oracle

  D. All of the above

  Correct Answer: B

• Question 143:

  Which type of automatic remediation can be performed by the PTA in case of a suspicious password change security event?

  A. Password change

  B. Password reconciliation

  C. Session suspension

  D. Session termination

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/Security- Configuration.htm

• Question 144:

  How does the Vault administrator configure the CyberArk Disaster Recovery (DR) solution to perform automatic failover in case of failure in the Primary Vault?

  A. By setting "EnableFailover=yes" in the padr.ini file

  B. By setting "EnableFailover=yes" in the dbparm.ini file

  C. By setting "FailoverMode=yes" in the padr.ini file

  D. By setting "FailoverMode=yes" in the dbparm.ini file

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Distributed- Vaults-during-Vault- Failure.htm#_Ref462652176

• Question 145:

  The Vault administrator can change the Vault license by uploading the new license to the system Safe.

  A. True

  B. False

  Correct Answer: A

  Reference: https://cyberark-customers.force.com/s/article/00002945

• Question 146:

  Select the best practice for storing the Master CD.

  A. Copy the files to the Vault server and discard the CD.

  B. Copy the contents of the CD to a Hardware Security Module and discard the CD.

  C. Store the CD in a secure location, such as a physical safe.

  D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions) on the vault.

  Correct Answer: C

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/Server-Keys.htm?Highlight=master%20cd

• Question 147:

  Which file is used to integrate the Vault with the RADIUS server?

  A. radius.ini

  B. PARagent.ini

  C. ENEConf.ini

  D. dbparm.ini

  Correct Answer: D

  Reference: https://www.reddit.com/r/CyberARk/comments/agnh06/using_radius_for_pvwa/

• Question 148:

  When managing SSH keys, the Central Policy Manager (CPM) stores the private key.

  A. in the Vault

  B. on the target server

  C. in the Vault and on the target server

  D. nowhere because the private key can always be generated from the public key

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing% 20SSH%20Keys.htm

• Question 149:

  The following applications are pre-configured to work with PSM. but first need to be installed on the PSM server.

  A. SQL Plus

  B. Putty

  C. RDP

  D. WinSCP

  E. Toad

  F. VMWare vSphere Client

  G. Microsoft SQL Management Studio

  Correct Answer: EFG

• Question 150:

  Which is the correct order of installation for PAS components?

  A. Vault. PVWA. CPM. PSM

  B. CPM, Vault. PSM. PVWA

  C. Vault, CPM. PSM, PVWA

  D. PVWA, Vault, CPM. PSM

  Correct Answer: A