CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 151:

  PSM requires the Remote Desktop Gateway role service.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 152:

  The password upload utility must run from the CPM server.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 153:

  Can ITALOG records be forwarded to the monitoring solution via Security Information and Event Management (SIEM) integration?

  A. Yes
  B. No
  B. No

  ---

  Explanation/Reference:

• Question 154:

  What is the purpose of the PrivateArk Server service?

  A. Executes password changes.
  B. Makes vault data accessible to components.
  C. Maintains vault metadata.
  D. Sends email alert from the Vault
  B. Makes vault data accessible to components.

• Question 155:

  CyberArk implements license limits by controlling the number and types of users that can be provisioned in the Vault.

  A. True
  B. False
  A. True

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the- CyberArk-License.htm

• Question 156:

  Auto-Detection can be configured to leverage LDAP/S.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 157:

  The vault server uses a modified version of the Microsoft Windows firewall.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

• Question 158:

  When accessing the Vault via PVWA, is it possible, is it possible to configure multiple Dual Authentication Methods?

  A. Yes, all authentication methods will be configured to use the Vault integrated authentication flow.
  B. No, dual authentication methods are not supported.
  C. Yes, authentication methods will be configured to use the combination of IIS and Vault integrated authentication flow.
  D. Yes, all authentication methods will be configured to use the IIS integrated authentication flow.
  C. Yes, authentication methods will be configured to use the combination of IIS and Vault integrated authentication flow.

• Question 159:

  In Accounts Discovery, you can configure a Windows discovery to scan______________.

  A. as many OUs as you wish
  B. up to three OUs.
  C. only one OU.
  D. a number of OUs determined by the OUstoScan setting under the Accounts Feed section in the Administration tab
  C. only one OU.

• Question 160:

  The ACME Company has been a CyberArk customer for many years. ACME Management has asked you to perform a "Health Check" review of the CyberArk deployment. During your analysis you discover that the PSM Component server is fully functional. The RDP SSL certificate is self-signed and the CyberArk Privileged Session Management Service is running under the Local Service. SSL 3.0 is enabled in the Registry.

  A. The PSM Component Server is configured as defined in PAS Installation Guide.
  B. The PSM Component Server has been installed correctly but PSM Hardening procedures have not been followed and must be rebuilt.
  C. The PSM Component Server has been installed correctly but PSM Hardening procedures have not been followed. Hardening procedures must be applied manually to the existing configuration.
  D. The PSM Component Server has been installed correctly but PVWA Hardening procedures have not been followed. Hardening procedures can be applied via the Installation Automation script or manually to the existing configuration.
  C. The PSM Component Server has been installed correctly but PSM Hardening procedures have not been followed. Hardening procedures must be applied manually to the existing configuration.

  ---

  Explanation/Reference: