CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 191:

  Which is the purpose of the interval setting in a Central Policy Manager (CPM) policy?

  A. To control how often the CPM looks for system-initiated CPM work
  B. To control how often the CPM looks for user-initiated CPM work
  C. To control how long the CPM rests between password changes
  D. To control the maximum amount of time the CPM will wait for a password change to complete
  A. To control how often the CPM looks for system-initiated CPM work

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASREF/CPM%20Settings%20-%20Introduction.htm

• Question 192:

  Which one of the built-in Vault users is not automatically added to the safe when it is first created in PVWA?

  A. Master
  B. Administrator
  C. Auditor
  D. Operator
  B. Administrator

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm Administrator This user appears on the highest level of the User hierarchy and has all the possible permissions. As such, it can create and manage other Users on any level on the Users hierarchy.

  No Safe Permissions needed for Administrator

  In PAM Administration Course - Access Control (Safes) Administrator is NOT in the screenshot and Operator is.

• Question 193:

  All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of OperationsManagers. The members of OperationsManagers never need to be able to use the show, copy or connect buttons themselves.

  Which safe permissions do you need to grant to OperationsManagers? (Choose all that apply.)

  A. Use Accounts
  B. Retrieve Accounts
  C. List Accounts
  D. Authorize Password Requests
  E. Access Safe without Authorization
  C. List Accounts
  D. Authorize Password Requests

  ---

  Explanation/Reference:

  C = List Account, so that the group can view only the account

  D = To approve only requests. Since it is mentioned that OperationStaff need approval from the OperationsManager.

• Question 194:

  Which CyberArk components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts'? Select all that apply.

  A. Discovery and Audit (DNA)
  B. Auto Detection (AD)
  C. Export Vault Data (EVD)
  D. On Demand Privileges Manager (OPM)
  E. Accounts Discovery
  A. Discovery and Audit (DNA)
  B. Auto Detection (AD)
  E. Accounts Discovery

  ---

  Explanation/Reference:

• Question 195:

  When using multiple Central Policy Managers (CPM), which one of the following Safes is shared by all CPMs?

  A. PasswordManagerSharedSafe
  B. PasswordManager_Pending
  C. PasswordManager_workspace
  D. PasswordManager_ADInternal
  B. PasswordManager_Pending

  ---

  Explanation/Reference:

• Question 196:

  DRAG DROP

  In version 10.7 the correct order of installation for components changed. Make the necessary corrections to the list below to show the new installation order.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 197:

  An SMTP integration allows you to forward audit records to a monitoring solution.

  A. TRUE
  B. FALSE
  B. FALSE

• Question 198:

  When managing SSH keys, the CPM stores the Public Key ________________.

  A. In the Vault
  B. On the target server
  C. A and B
  D. Nowhere because the public key can always be generated from the private key
  B. On the target server

• Question 199:

  What is the purpose of the Allowed Safes parameter in a CPM policy? Select all that apply.

  A. To improve performance by reducing CPU workload.
  B. To prevent accidental use of a policy in the wrong safe.
  C. To allow users to access only the passwords they should be able to access.
  D. To enforce Least Privilege in CyberArk.
  A. To improve performance by reducing CPU workload.
  B. To prevent accidental use of a policy in the wrong safe.

  ---

  Explanation/Reference:

• Question 200:

  An SMTP integration allows you to forward audit records from the vault to the SIEM.

  A. TRUE
  B. FALSE
  B. FALSE