CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 31:

  When accessing the Vault via PVWA, is it possible, is it possible to configure multiple Dual Authentication Methods?

  A. Yes, all authentication methods will be configured to use the Vault integrated authentication flow.

  B. No, dual authentication methods are not supported.

  C. Yes, authentication methods will be configured to use the combination of IIS and Vault integrated authentication flow.

  D. Yes, all authentication methods will be configured to use the IIS integrated authentication flow.

  Correct Answer: C

• Question 32:

  What are the operating system prerequisites for installing CPM? Select all that apply.

  A. .NET 3.51 Framework Feature

  B. Web Services Role

  C. Remote Desktop Services Role

  D. Windows 2008 R2 or higher

  Correct Answer: A

• Question 33:

  When working with the CyberArk Cluster, which service is considered Optional (i.e., failure of the service does not mandate a failover)?

  A. PrivateArk Server

  B. PrivateArk Database

  C. Event Notification Engine

  D. Logic Container

  Correct Answer: C

• Question 34:

  Users complain they are unsuccessful attempting to authenticate to the PVWA web site.

  After entering their credentials, they receive a "Timeout has expired". You test the URL using multiple browsers and receive the same error. The CyberArk.WebApplication.log shows the "ITACM012S Timeout has expired" log entry.

  What is the next troubleshooting step you should take?

  A. Run an IISRESET on the PVWA server

  B. Check the CyberArk.WebConsole.log for errors

  C. Check network firewall rules to ensure the PVWA can communicate to the Vault over tcp_1858

  D. Check the health of the Vault Server and ensure all services are running

  Correct Answer: C

• Question 35:

  HA, DR, Replicate are mutually exclusive and cannot be used in the same environment.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 36:

  The vault does not support Subnet Based Access Control.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 37:

  It is possible to restrict the time of day. or day of week that a change process can occur.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 38:

  Within the Vault each password is encrypted by:

  A. The Server Key

  B. The Recovery Public Key

  C. The Recovery Private key

  D. Its own unique key.

  Correct Answer: D

  Every password object has it's own file key. This is encrypted with the safe key. This server key is encrypted with both the recovery public key and with the server key.

• Question 39:

  The Remote Desktop Services role installed on PSM must be properly licensed by Microsoft.

  A. No, this is not necessary

  B. Yes, this is a must and needs to be scoped and purchased prior to project implementation

  C. Yes, RDS is included as part of Microsoft Operating System License

  D. No, RDS licenses are only required when using the RemoteApp feature

  Correct Answer: B

• Question 40:

  In an SMTP integration it is recommended to use the fully-qualified domain name (FQDN) when specifying the SMTP server addresses).

  A. TRUE

  B. FALSE

  Correct Answer: B