CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 161:

  Which user is automatically given all Safe authorizations on all Safes?

  A. Administrator
  B. Master
  C. Auditor
  D. Operator
  B. Master

• Question 162:

  Access Control to passwords is implemented by ________________.

  A. Virtual Authorizations
  B. Safe Authorizations
  C. Master Policy
  D. Platform Settings
  B. Safe Authorizations

• Question 163:

  When managing SSH keys. CPM automatically pushes the Private Key to all systems that use it.

  A. TRUE
  B. FALSE
  B. FALSE

  ---

  Explanation/Reference:

  A single SSH Key can be used to access multiple target systems. The same “public key” is distributed to each target system where a privileged account can be authenticated using the same SSH Key. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing%20SSH%20Keys.htm

• Question 164:

  If a user is a member of more than one group that has authorizations on a safe, by default that user is granted __________________.

  A. the vault will not allow this situation to occur.
  B. only those permissions that exist on the group added to the safe first.
  C. only those permissions that exist in all groups to which the user belongs.
  D. the cumulative permissions of all the groups to which that user belongs
  D. the cumulative permissions of all the groups to which that user belongs

  ---

  Explanation/Reference:

  It is not only permissions of the first added group. Also, combination of authorizations can be adopted by users who belongs to several groups inside a safe

• Question 165:

  Which Built-in group grants access to the ADMINISTRATION page?

  A. PVWAMonitor
  B. PVWAUsers
  C. Auditors
  D. Vault Admins
  B. PVWAUsers

• Question 166:

  It is impossible to override Master Policy settings for a Platform.

  A. TRUE
  B. FALSE
  B. FALSE

  ---

  Explanation/Reference:

• Question 167:

  Which credentials does CyberArk use when managing a target account?

  A. Those of the service account for the CyberArk Password Manager serviceD18912E1457D5D1DDCBD40AB3BF70D5D
  B. A Domain Administrator account created for this purpose
  C. The credentials of the target account
  D. An account assigned by the Master Policy
  A. Those of the service account for the CyberArk Password Manager serviceD18912E1457D5D1DDCBD40AB3BF70D5D

• Question 168:

  A Vault Administrator wants to change the PSM Server ID to comply with a naming standard What is the process for changing the PSM Server ID?

  A. First, logon to the PrivateArk Client as Administrator and open the PVWAConfig safe. Retrieve and edit the PVConfiguration.xml file. Search for the PSMServer Name and update the ID of the server you want to rename Save the file and copy back to the PVWAConfig safe. Restart the "CyberArk Privileged Session Manager" service on the PSM server.
  B. Login to the PVWA. then change the PSMServer ID in Administration. System Configuration. Options, Privileged Session Management. Configured PSM Servers Run an IISRESET on all PVWA servers.
  C. First, login to the PVWA. browse to Administration. System Configuration. Options. Pnvileged Session Management. Configured PSM Servers and select the PSM Server you need to change from the list of servers In the properties pane, set the value of the ID property to the new Server ID. click Apply and OK. Next, edit the basic_psm.ini file located on the PSM server in the PSM root directory and update the PSMServerlD parameter with the new Server ID. save the file and restart the "CyberArk Privileged Session Manager" service on the PSM server
  D. Options A and B above is the correct procedure
  C. First, login to the PVWA. browse to Administration. System Configuration. Options. Pnvileged Session Management. Configured PSM Servers and select the PSM Server you need to change from the list of servers In the properties pane, set the value of the ID property to the new Server ID. click Apply and OK. Next, edit the basic_psm.ini file located on the PSM server in the PSM root directory and update the PSMServerlD parameter with the new Server ID. save the file and restart the "CyberArk Privileged Session Manager" service on the PSM server

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Optional-Changing-the-PSM- Server-ID.htm

• Question 169:

  When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

  A. True, this is the default behavior.
  B. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file.
  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file.
  D. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the dbparm.ini file.
  B. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file.

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Initiating-DR- Failback-to-Production- Vault.htm

• Question 170:

  It is possible to restrict the time of day. or day of week that a change process can occur.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference: