CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 211:

  The Application Inventory report is related to AIM.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 212:

  All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe The members of the AD group UnixAdmms need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of OperationsManagers The members of OperationsManagers never need to be able to use the show, copy or connect buttons themselves.

  Which safe permissions do you need to grant to UnixAdmins? Check all that apply

  A. Use Accounts

  B. Retrieve Accounts

  C. List Accounts

  D. Authorize Password Requests

  E. Access Safe without Authorization

  Correct Answer: CD

  C = List Account, so that the group can view only the account

  D = To approve only requests. Since it is mentioned that OperationStaff need approval from the OperationsManager.

• Question 213:

  Any user can monitor live sessions in real time when users initiate RDP connection via Secure Connect through PSM?

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 214:

  A safe was recently created by a user who is a member of the LDAP Vault Administrators group. Which of the following users does not have access to the newly created safe by default?

  A. Master

  B. Administrator

  C. Auditor

  D. Backup

  Correct Answer: B

• Question 215:

  Which file is used to configure the ENE service?

  A. ENE.ini

  B. ENEConfig.ini

  C. dbparm.ini

  D. paragent.ini

  Correct Answer: C

• Question 216:

  What is the purpose of the CyberArk Event Notification Engine service?

  A. It sends email messages from the CPM

  B. It sends email messages from the Vault.

  C. It processes audit report messages

  D. It makes vault data available to components.

  Correct Answer: B

• Question 217:

  The Vault does not support dual factor authentication.

  A. True

  B. False

  Correct Answer: B

  Reference: https://duo.com/docs/cyberark

• Question 218:

  Which utilities could you use to change debugging levels on the vault without having to restart the vault Select all that apply?

  A. PAR Agent

  B. PrivateArk Server Central Administration

  C. Edit DBParm.ini in a text editor.

  D. Setup exe

  Correct Answer: AB

• Question 219:

  What is the purpose of the password Change process?

  A. To test that CyberArk is storing accurate credentials for accounts

  B. To change the password of an account according to organizationally defined password rules

  C. To allow CyberArk to manage unknown or lost credentials

  D. To generate a new complex password

  Correct Answer: B

• Question 220:

  Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

  A. Server Key

  B. Recovery Public Key

  C. Recovery Private Key

  D. Safe Key

  Correct Answer: AB

  Reference:https://www.reddit.com/r/CyberARk/comments/8s96n8/certificat_problem_with_ my_vault/