CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 21:

  Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

  A. PSM (i.e., launching connections by clicking on the "Connect" button in the PVWA)

  B. PSM for Windows (previously known as RDP Proxy)

  C. PSM for SSH (previously known as PSM SSH Proxy)

  D. All of the above

  Correct Answer: D

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/Configuring-Recordings-and-Audits-in-PSM.htm

• Question 22:

  dbparm.ini is the main configuration file for the vault.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 23:

  Which one of the built-in Vault users is not automatically added to the safe when it is first created in PVWA?

  A. Master

  B. Administrator

  C. Auditor

  D. Operator

  Correct Answer: B

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm Administrator This user appears on the highest level of the User hierarchy and has all the possible permissions. As such, it can create and manage other Users on any level on the Users hierarchy.

  No Safe Permissions needed for Administrator

  In PAM Administration Course - Access Control (Safes) Administrator is NOT in the screenshot and Operator is.

• Question 24:

  Customers who have the 'Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

  A. TRUE

  B. FALSE

  Correct Answer: B

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PVWA-Dual-Control.htm

• Question 25:

  What is the maximum number of levels of authorizations you can set up in Dual Control?

  A. 1

  B. 2

  C. 3

  D. 4

  Correct Answer: B

  Require multi-level password access approval – This advanced setting enforces an access control workflow in which end users require two levels of authorization before they can access privileged accounts. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PVWA-Dual-Control.htm

• Question 26:

  In the vault each password is encrypted with a unique encryption key.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 27:

  The Vault needs to send SNMP traps to an SNMP solution. In which configuration file do you set the IP address of the SNMP solution?

  A. PARAgent.ini

  B. dbparm.ini

  C. ENEConf.ini

  D. my.ini

  Correct Answer: A

  Explanation: Configure Remote Monitoring

  In the remote control agent configuration file, PARAgent.ini, specify the following parameters:

  SNMPHostIP - The IP address of the remote computer where SNMP traps will be sent.

  Separate multiple IP addresses with a comma.

• Question 28:

  A Logon Account can be specified in the platform settings.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 29:

  CyberArk implements license limits by controlling the number and types of users that can be provisioned in the Vault.

  A. True

  B. False

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the- CyberArk-License.htm

• Question 30:

  Which IP port and Protocol are used by the CyberArk Secure Proprietary Protocol?

  A. TCP/1858

  B. TCP/636

  C. UDP/1812

  D. TCP/22

  Correct Answer: A