CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 221:

  One of your users is receiving the error message "ITATS006E Station is suspended for User jsmith" when attempting to sign in to the pvwa. Which utility would you use to correct this problem?

  A. createcredfile.exe
  B. cavaultmanager.exe
  C. PrivateArk
  D. PVWA
  C. PrivateArk

  ---

  Explanation/Reference:

• Question 222:

  CyberArk recommends implementing object level access control on all Safes.

  A. True
  B. False
  B. False

  ---

  Explanation/Reference:

• Question 223:

  Using the SSH Key Manager it is possible to allow CPM to manage SSH Keys similarly to passwords.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Using%20SSH%20Keys.htm

• Question 224:

  The vault provides a tamper-proof audit trail.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 225:

  What is the purpose of the CyberArk Event Notification Engine service?

  A. It sends email messages from the CPM
  B. It sends email messages from the Vault.
  C. It processes audit report messages
  D. It makes vault data available to components.
  B. It sends email messages from the Vault.

  ---

  Explanation/Reference:

• Question 226:

  Which of the following are prerequisites for installing PVWA Check all that Apply?

  A. Web Services Role
  B. NET 4.5.1 Framework Feature
  C. Remote Desktop Services Role
  D. Windows BitLocker
  A. Web Services Role

  ---

  Explanation/Reference:

• Question 227:

  When on-boarding accounts using Accounts Feed. Which of the following is true?

  A. You must specify an existing Safe where the account will be stored when it is on- boarded to the Vault.
  B. You can specify the name of a new safe that will be created where the account will be stored when it is on-boarded to the Vault.
  C. You can specify the name of a new Platform that will be created and associated with the account.
  D. Any account that is on-boarded can be automatically reconciled regardless of the platform it is associated with
  B. You can specify the name of a new safe that will be created where the account will be stored when it is on-boarded to the Vault.

  ---

  Explanation/Reference:

• Question 228:

  Which of the following options is not set in the Master Policy?

  A. Password Expiration Date
  B. Dual Control
  C. Password Complexity
  D. Require Access Reason
  C. Password Complexity

  ---

  Explanation/Reference:

• Question 229:

  Which file does the Vault administrator need to edit in order to configure the integration of the Vault with the radius server?

  A. radius.ini
  B. PARagent.ini
  C. ENEConf.ini
  D. dbparm.ini
  D. dbparm.ini

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/ RADIUS-Authentication.htm

• Question 230:

  Which service should NOT be running on the DR Vault when the primary production Vault is up?

  A. PrivateArk Database
  B. PrivateArk Server
  C. CyberArk Vault Disaster Recovery Service
  D. CyberArk Logical Container
  B. PrivateArk Server