CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 141:

  What conditions must be met in order to log into the vault as the Master user? Select all that apply

  A. Logon must be originated from the console of the Vault server or an EmergencyStation defined in DBParm.ini
  B. User must provide the correct master password
  C. Logon requires the Recovery Private Key to be accessible to the vault
  D. Logon must satisfy a challange response request
  A. Logon must be originated from the console of the Vault server or an EmergencyStation defined in DBParm.ini
  B. User must provide the correct master password
  C. Logon requires the Recovery Private Key to be accessible to the vault

  ---

  Explanation/Reference:

• Question 142:

  It is possible to disable the Show and Copy buttons without removing the Retrieve permission on a safe.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 143:

  You have associated a logon account to one of your UNIX root accounts in the vault. When attempting to verify the root account's password the CPM will...?

  A. Ignore the logon account and attempt to log in as root.
  B. Prompt the end user with a dialog box asking for the login account to use.
  C. Log in first with the logon account, then run the su command to log in as root using the password in the vault
  D. None of these.
  C. Log in first with the logon account, then run the su command to log in as root using the password in the vault

  ---

  Explanation/Reference:

  password verification and login for linux root is done in the same way

• Question 144:

  Which Master Policy Setting(s) must be active in order to have an account checked-out by one user for a predetermined amount of time?

  A. Require dual control password access Approval
  B. Enforce check-in/check-out exclusive access
  C. Enforce one-time password access
  D. Enforce check-in/check-out exclusive access and Enforce one-time password access
  D. Enforce check-in/check-out exclusive access and Enforce one-time password access

  ---

  Explanation/Reference:

  To achieve automatic release of locked passwords and full personal accountability, enable this rule along with the Enforce one-time password access rule. https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/privCloud-master-policy-rules.htm#Enforce

• Question 145:

  Multiple PVWA servers provide automatic load balancing.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

• Question 146:

  Which of the following is NOT a use case for installing multiple CPMS?

  A. A single CPM cannot accommodate the total number of accounts managed
  B. Accounts are managed in multiple sites or VLANs protected by firewall
  C. Reduce network traffic across WAN links
  D. Provide load balancing capabilities when managing passwords on target devices
  D. Provide load balancing capabilities when managing passwords on target devices

• Question 147:

  What is the primary purpose of One Time Passwords?

  A. Reduced risk of credential theft
  B. More frequent password changes
  C. Non-repudiation (individual accountability)
  D. To force a `collusion to commit' fraud ensuring no single actor may use a password without authorization
  A. Reduced risk of credential theft

• Question 148:

  In an SIEM integration it is recommended to use the fully-qualified domain name (FGDN) when specifying the SIEM server address(es).

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

• Question 149:

  It is possible to restrict the time of day. or day of week that a verify process can occur.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

• Question 150:

  Which utilities could you use to change debugging levels on the vault without having to restart the vault Select all that apply?

  A. PAR Agent
  B. PrivateArk Server Central Administration
  C. Edit DBParm.ini in a text editor.
  D. Setup exe
  A. PAR Agent
  B. PrivateArk Server Central Administration

  ---

  Explanation/Reference: