CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 221:

  Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the domain controller during LDAP/S integration?

  A. PVWA > Platform Management > LDAP Integration

  B. PVWA > Administration > LDAP Integration

  C. PVWA > Administration > Options > LDAP Integration

  D. PVWA > LDAP Integration

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/ LPLDAPIntegration.htm

• Question 222:

  Which service should NOT be running on the DR Vault when the primary Production Vault is up?

  A. PrivateArk Database

  B. PrivateArk Server

  C. CyberArk Vault Disaster Recovery (DR) service

  D. CyberArk Logical Container

  Correct Answer: B

• Question 223:

  Which of the following is NOT a use case for installing multiple CPMS?

  A. A single CPM cannot accommodate the total number of accounts managed

  B. Accounts are managed in multiple sites or VLANs protected by firewall

  C. Reduce network traffic across WAN links

  D. Provide load balancing capabilities when managing passwords on target devices

  Correct Answer: D

• Question 224:

  One of your users is receiving the error message "ITATS006E Station is suspended for User jsmith" when attempting to sign in to the pvwa. Which utility would you use to correct this problem?

  A. createcredfile.exe

  B. cavaultmanager.exe

  C. PrivateArk

  D. PVWA

  Correct Answer: C

• Question 225:

  In Accounts Discovery, you can configure a Windows discovery to scan______________.

  A. as many OUs as you wish

  B. up to three OUs.

  C. only one OU.

  D. a number of OUs determined by the OUstoScan setting under the Accounts Feed section in the Administration tab

  Correct Answer: C

• Question 226:

  PSM captures a record of each command that was issues in SQL Plus.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 227:

  Which of the following are prerequisites for installing PVWA Check all that Apply?

  A. Web Services Role

  B. NET 4.5.1 Framework Feature

  C. Remote Desktop Services Role

  D. Windows BitLocker

  Correct Answer: A

• Question 228:

  To support a fault tolerant and high-availability architecture, the Password Vault Web Access (PVWA) servers must to be configured to communicate with the Primary Vault and Satellite Vaults. Which file needs to be changed on the PVWA to enable this setup?

  A. Vault.ini

  B. dbparm.ini

  C. pvwa.ini

  D. Satellite.ini

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.1/en/Content/PAS%20INST/Password- Vault-Web-Access- Installation.htm

• Question 229:

  What is the primary purpose of Exclusive Accounts?

  A. Reduced risk of credential theft

  B. More frequent password changes

  C. Non-repudiation (individual accountability)

  D. To force a `collusion to commit' fraud ensuring no single actor may use a password without authorization

  Correct Answer: C

• Question 230:

  Which of the following statements are NOT true when enabling PSM recording for a target Windows server? Choose all that apply

  A. The PSM software must be installed on the target server

  B. PSM must be enabled in the Master Policy {either directly, or through exception).

  C. PSMConnect must be added as a local user on the target server

  D. RDP must be enabled on the target server

  Correct Answer: C