CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 11:

  Which one of the following reports is NOT generated by using the Password Vault Web Access (PVWA)?

  A. Accounts Inventory
  B. Application Inventory
  C. Active/Non-Active Users
  D. Compliance Status
  C. Active/Non-Active Users

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ ReportsInPVWA.htm

• Question 12:

  What is the name of the Platform parameter that determines the amount of time a person is allowed to use a One Time Password?

  A. MinValidityPeriod
  B. Interval
  C. ImmediateInterval
  D. Timeout
  A. MinValidityPeriod

  ---

  Explanation/Reference:

  MinValidityPeriod:The number of minutes to wait from the last retrieval of the password until it is replaced. This gives the user a minimum period to be able to use the password before it is replaced. Use -1 to ignore this property. This parameter is also used to release exclusive accounts automatically.

• Question 13:

  When a DR vault server becomes an active vault, it will automatically fail bacK to the original state once the primary vault comes back online.

  A. True, this is the default behavior
  B. False, this is not possible
  C. True, if the 'AllowFailback' setting is set to yes in the PADR.ini file.
  D. True, if the 'AllowFailback' setting is set to yes in the dbparm ini file.
  B. False, this is not possible

  ---

  Explanation/Reference:

  There is no "Failback" parameter. When a failover happens, the ONLY way to fail back is a manual failback.

• Question 14:

  tsparm.ini is the main configuration file for the vault.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 15:

  When a group is granted the `Authorize Account Requests' permission on a safe Dual Control requests must be approved by:

  A. Any one person from that group
  B. Every person from that group
  C. The number of persons specified by the Master Policy
  D. That access cannot be granted to groups
  C. The number of persons specified by the Master Policy

  ---

  Explanation/Reference:

• Question 16:

  One time passwords reduce the risk of Pass the Hash vulnerabilities in Windows.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

• Question 17:

  Which file is used to open up a non-standard Firewall port to the Vault?

  A. dbparm.ini
  B. PARagent.ini
  C. passparm.ini
  D. Vault.ini
  A. dbparm.ini

  ---

  Explanation/Reference:

  AllowNonStandardFWAddresses is in https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASREF/DBParm.ini.htm Not in : https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PACLI/Vault-Parameter-File.htm

• Question 18:

  If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

  A. Configure the Provider to change the password to match the Vault's Password
  B. Associate a reconcile account and configure the platform to reconcile automatically
  C. Associate a logon account and configure the platform to reconcile automatically
  D. Run the correct auto detection process to rediscover the password
  B. Associate a reconcile account and configure the platform to reconcile automatically

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.4/en/Content/PASIMP/Reconciling-Passwords.htm

• Question 19:

  Which of the following logs contain information about errors related to PTA?

  A. ITAlog.log
  B. diamond.log
  C. pm_error.log
  D. WebApplication.log
  B. diamond.log

• Question 20:

  What is the purpose of the password Change process?

  A. To test that CyberArk is storing accurate credentials for accounts
  B. To change the password of an account according to organizationally defined password rules
  C. To allow CyberArk to manage unknown or lost credentials
  D. To generate a new complex password
  B. To change the password of an account according to organizationally defined password rules