CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 151:

  What is the purpose of the password Reconcile process?

  A. To test that CyberArk is storing accurate credentials for accounts.

  B. To change the password of an account according to organizationally defined password rules.

  C. To allow CyberArk to manage unknown or lost credentials.

  D. To generate a new complex password.

  Correct Answer: C

  Correct answer is C, as Reconcile's purpose is to reset passwords that are unsynchronized with the Vault, so that the password on the device and the password in Vault are "reconciled" (made the same).

• Question 152:

  An auditor initiates a LIVE monitoring session to PSM server to view an ongoing LIVE session. When the auditor's machine makes an RDP connection the PSM server, which user will be used?

  A. PSMAdminConnect

  B. Shadowuser

  C. PSMConnect

  D. Credentials Stored in the Vault for the Target Machine

  Correct Answer: A

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Optional-Moving-the-PSMConnec-and-PSMAdminConnect-users-to-your-Domain.htm#ConfiguretheRemoteDesktopSessiononthePSM

• Question 153:

  If a transparent user belongs two different directory mappings, how does the system determine, which user template to use?

  A. The system will use the template for the mapping listed first.

  B. The system will use the template for the mapping listed last.

  C. The system will grant all of the vault authorizations from the two templates.

  D. The system will grant only the vault authorizations that are listed in both templates.

  Correct Answer: A

• Question 154:

  Which file is used to configure new firewall rules on the Vault?

  A. firewall.ini

  B. PARagent.ini

  C. dbparm.ini

  D. padr.ini

  Correct Answer: C

  Reference: https://www.reddit.com/r/CyberARk/comments/at0q56/open_ports_cyberark_vault/

• Question 155:

  What is the purpose of the Allowed Safes parameter in a CPM policy? Select all that apply.

  A. To improve performance by reducing CPU workload.

  B. To prevent accidental use of a policy in the wrong safe.

  C. To allow users to access only the passwords they should be able to access.

  D. To enforce Least Privilege in CyberArk.

  Correct Answer: AB

• Question 156:

  What are the functions of the Remote Control Agent service? (Choose all that apply.)

  A. Allows remote monitoring of the Vault

  B. Sends SNMP traps from the Vault

  C. Maintains audit data

  D. Allows CyberArk Services to be managed (start/stop/status) remotely

  Correct Answer: ABD

• Question 157:

  According to the default web options settings, which group grants access to the reports page?

  A. PVWAMonitor

  B. PVWAUsers

  C. Auditors

  D. Vault administrators

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ ReportsInPVWA.htm

• Question 158:

  What is the purpose of EVD?

  A. To extract vault metadata into an open database platform.

  B. To allow editing of vault metadata.

  C. To create a backup of the MySQL database.

  D. To extract audit data from the vault.

  Correct Answer: D

  Reference: https://docs.cyberark.com/ProductDoc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/ lpExportVaultDataUtility.htm

• Question 159:

  In accordance with best practice. SSH access is denied for root accounts on UNIX/LINUX systems. What is the BEST way to allow CPM to manage root accounts.

  A. Create a privileged account on the target server Allow this account the ability to SSH directly from the CPM machine Configure this account as the Reconcile account of the target server's root account.

  B. Create a non-privileged account on the target server Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account

  C. Configure the Unix system to allow SSH logins.

  D. Configure the CPM to allow SSH logins

  Correct Answer: B

• Question 160:

  One can create exceptions to the Master Policy based on_________.

  A. Safes

  B. Platforms

  C. Policies

  D. Accounts

  Correct Answer: B