CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 31:

  It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/Privilege%20Cloud/PrivCloud-Assess-network.htm#:~:text=CyberArk%20DNA%20is%20a%20discovery,privileged%20and%20non%2Dprivileged%20accounts.

• Question 32:

  During the process of installing the CPM, you will be asked to provide the credentials for an administrate user in the Vault. What are these credentials used for?

  A. The credentials will be used later by the CPM to retrieve passwords from the Vault
  B. The credentials are by the installer to register the CPM in the CyberArk database
  C. The credentials are used by the installer to authenticate to the Vault and create the CPM environment (safes, users, etc.)
  D. The credentials will be used later by the CPM to update passwords in the Vault
  C. The credentials are used by the installer to authenticate to the Vault and create the CPM environment (safes, users, etc.)

• Question 33:

  The Vault administrator can change the Vault license by uploading the new license to the system Safe.

  A. True
  B. False
  A. True

  ---

  Explanation/Reference:

  Reference: https://cyberark-customers.force.com/s/article/00002945

• Question 34:

  When the PSM Gateway (also known as the HTML5 ) End Point in order to launch connections via the PSM A. True

  B. False. When the PSM Gateway is implemented, the user only requires a browser in order launch a connection via the PSM.
  B. False. When the PSM Gateway is implemented, the user only requires a browser in order launch a connection via the PSM.

  ---

  Explanation/Reference:

• Question 35:

  Which service is optional on the Vault?

  A. PrivateArk Server
  B. PrivateArk Remote Control Agent
  C. PrivateArk Database
  D. CyberArk Hardened Windows Firewall
  B. PrivateArk Remote Control Agent

  ---

  Explanation/Reference:

  Reference: https://www.niap-ccevs.org/MMO/Product/st_vid11006-agd5.pdf

• Question 36:

  Customers who have the 'Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

  A. TRUE
  B. FALSE
  B. FALSE

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PVWA-Dual-Control.htm

• Question 37:

  For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure access a password without approval?

  A. Create an exception to the Master Policy to exclude the group from the workflow process.
  B. Edit the master policy rule and modify the advanced 'Access safe without approval' rule to include the group.
  C. On the safe in which the account is stored grant the group the 'Access safe without audit' authorization.
  D. On the safe in which the account is stored grant the group the 'Access safe without confirmation' authorization
  D. On the safe in which the account is stored grant the group the 'Access safe without confirmation' authorization

  ---

  Explanation/Reference:

• Question 38:

  Select the best practice for storing the Master CD.

  A. Copy the files to the Vault server and discard the CD.
  B. Copy the contents of the CD to a Hardware Security Module and discard the CD.
  C. Store the CD in a secure location, such as a physical safe.
  D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions) on the vault.
  C. Store the CD in a secure location, such as a physical safe.

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/Server-Keys.htm?Highlight=master%20cd

• Question 39:

  In a Disaster Recovery (DR) environment, which of the following should NEVER be configured for automatic failover due to the possibility of split-brain phenomenon?

  A. Password Vault Web Access (PVWA)
  B. PSM
  C. CPM
  D. PTA
  D. PTA

• Question 40:

  Which file is used to configure new firewall rules on the Vault?

  A. firewall.ini
  B. paragent.ini
  C. dbparm.ini
  D. padr.ini
  C. dbparm.ini