CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 231:

  What is the name of the Platform parameter that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

  A. MinValidityPeriod
  B. Interval
  C. Immediatelnterval
  D. Timeout
  A. MinValidityPeriod

• Question 232:

  After the Vault server is installed, the Microsoft Windows firewall is now commandeered by the Vault. Can the administrator change these firewall rules?

  A. Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the Vault.
  B. Yes, the administrator can still modify firewall rules via the Windows firewall interface.
  C. No, the Vault does not permit any changes to the firewall due to security requirements.
  D. Yes, but the administrator can only modify the firewall rules by editing the FirewallRules.ini file and the restarting the Vault.
  A. Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the Vault.

• Question 233:

  Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the target email server during Simple Mail Transfer Protocol (SMTP) integration?

  A. PVWA > Platform Management > Notification Settings
  B. PVWA > Options > Notification Settings
  C. PVWA > Administration > Notification Settings
  D. PVWA > LDAP Integration > Notification Settings
  C. PVWA > Administration > Notification Settings

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring- Email-Notification.htm

• Question 234:

  Ad-Hoc Access (formerly Secure Connect) provides the following features. (Choose all that apply.)

  A. PSM connections to target devices that are not managed by CyberArk
  B. Session Recording
  C. Real-time live session monitoring
  D. PSM connections from a terminal without the need to login to the PVWA
  A. PSM connections to target devices that are not managed by CyberArk
  B. Session Recording
  C. Real-time live session monitoring

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Connecting-with-Secure-Connect.htm?TocPath=End%20User%7CConnect%20to%20Accounts%7C_____2

• Question 235:

  SAFE Authorizations may be granted to___________________.

  A. Vault Users
  B. Vault Groups
  C. LDAP Users
  D. LDAP Groups
  E. All of above
  E. All of above

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Safes-add-a-safe-member.htm

• Question 236:

  Multiple PVWA servers can be load balanced.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

• Question 237:

  What is the primary purpose of Dual Control?

  A. Reduced risk of credential theft
  B. More frequent password changes
  C. Non-repudiation (individual accountability)
  D. To force a `collusion to commit' fraud ensuring no single actor may use a password without authorization
  D. To force a `collusion to commit' fraud ensuring no single actor may use a password without authorization