CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 191:

  What is the proper way to allow the Vault to resolve host names?

  A. Define a DNS server

  B. Define a WINS server

  C. Defining the local hosts file

  D. The Vault cannot resolve host names due to security standards

  Correct Answer: C

• Question 192:

  Which credentials does CyberArk use when managing a target account?

  A. Those of the service account for the CyberArk Password Manager serviceD18912E1457D5D1DDCBD40AB3BF70D5D

  B. A Domain Administrator account created for this purpose

  C. The credentials of the target account

  D. An account assigned by the Master Policy

  Correct Answer: A

• Question 193:

  Which of the following sends out Simple Network Management Protocol (SNMP) traps?

  A. PrivateArk Remote Control Agent

  B. PrivateArk Server

  C. CyberArk Event Notification Engine

  D. CyberArk SNMP agent

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring- Remote- Monitoring.htm#_Ref364686578

• Question 194:

  The Vault Internal safe contains all of the configuration for the vault.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 195:

  What is the purpose of a password group?

  A. To ensure that a particular collection of accounts all have the same password

  B. To ensure a particular set of accounts all change at the same time

  C. To connect the CPM to a target system

  D. To allow more than one account to work together as part of a password management process

  Correct Answer: B

• Question 196:

  A SIEM integration allows you to forward ITALOG records to a monitoring solution.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 197:

  You have associated a logon account to one of your UNIX root accounts in the vault. When attempting to verify the root account's password the CPM will...?

  A. Ignore the logon account and attempt to log in as root.

  B. Prompt the end user with a dialog box asking for the login account to use.

  C. Log in first with the logon account, then run the su command to log in as root using the password in the vault

  D. None of these.

  Correct Answer: C

  password verification and login for linux root is done in the same way

• Question 198:

  Which combination of safe member permissions will allow End Users to log in to a remote machine transparently but NOT show or copy the password?

  A. Use Accounts, Retrieve Accounts, List Accounts

  B. Use Accounts, List Accounts

  C. Use Accounts

  D. List Accounts, Retrieve Accounts

  Correct Answer: B

• Question 199:

  What is the name of the Platform parameter that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

  A. MinValidityPeriod

  B. Interval

  C. Immediatelnterval

  D. Timeout

  Correct Answer: A

• Question 200:

  Name two ways of viewing the ITAlog:

  A. Log into the vault locally and navigate to the Server folder under the PrivateArk install location.

  B. Log into the PVWA and go to the Reports tab.

  C. Access the System Safe from the PrivateArk client.

  D. Go to the Thirdpary log directory on the CPM

  Correct Answer: AC