CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 211:

  The Vault needs to send SNMP traps to an SNMP solution. In which configuration file do you set the IP address of the SNMP solution?

  A. PARAgent.ini
  B. dbparm.ini
  C. ENEConf.ini
  D. my.ini
  A. PARAgent.ini

  ---

  Explanation/Reference:

  Configure Remote Monitoring

  In the remote control agent configuration file, PARAgent.ini, specify the following parameters:

  SNMPHostIP - The IP address of the remote computer where SNMP traps will be sent.

  Separate multiple IP addresses with a comma.

• Question 212:

  A Logon Account can be specified in the Master Policy

  A. TRUE
  B. FALSE
  B. FALSE

  ---

  Explanation/Reference:

  Nowhere in the master policy can you choose a logon account to use. It wouldn't make sense even, as different logon accounts are used for different systems, and master policy applies to all platforms regardless to which system it is used.

  All available master policy settings can be found here: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Working-with-Master-Policy-Rules.htm

• Question 213:

  For the hardening process to complete successfully, security products like Antivirus should be installed on the Vault server before running the vault installer.

  A. TRUE
  B. FALSE
  B. FALSE

  ---

  Explanation/Reference:

  No third party tools should be installed on the vault server.

• Question 214:

  Which utility can be used to copy a server key to an HSM?

  A. PrivateArk Client
  B. A proprietary utility provided by the HSM Vendor
  C. ChangeServerKeys.exe
  D. CAVaultManager.exe
  B. A proprietary utility provided by the HSM Vendor

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Distributed- Vault-HSM.htm

• Question 215:

  Which file is used to integrate the Vault with your Radius server?

  A. radius.ini
  B. paragent ini
  C. ENEConf.ini
  D. dbparm.ini
  D. dbparm.ini

  ---

  Explanation/Reference:

  Reference: https://docs.secureauth.com/pages/viewpage.action?pageId=40045055

• Question 216:

  In order to connect to a target device through PSM. the account credentials used for the connection must be stored in the vault?

  A. True
  B. False. Because the user can also enter credentials manually using Secure Connect
  C. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSMConnect.
  D. False Because if credentials are not stored in the vault, the PSM will prompt for credentials
  B. False. Because the user can also enter credentials manually using Secure Connect

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Connecting-with-Secure-Connect.htm

  "Then you specify the address of the remote machine, and the user name and password that are required to log on, but which are not managed in the Vault."

• Question 217:

  When managing SSH keys. CPM automatically pushes the Public Key to the target system.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

• Question 218:

  The Vault can only integrate with a single Security Information and Event Management (SIEM) or SYSLOG server.

  A. True
  B. False
  B. False

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/DV-Integrating- with-SIEM-Applications.htm

• Question 219:

  When creating an onboarding rule, it will be executed upon.

  A. All accounts in the pending accounts list.
  B. Any future accounts discovered by a discovery process.
  C. All accounts in the pending accounts list and any future accounts discovered by a discovery process.
  B. Any future accounts discovered by a discovery process.

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing- Discovery-Processes.htm

• Question 220:

  During ENE integration you should specify the Fully-Qualified Domain Name (FQDN) of the SMTP Gateway server.

  A. TRUE
  B. FALSE
  B. FALSE

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.6/en/Content/PASIMP/Event-Notification-Engine.htm