CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 41:

  Which is the purpose of the interval setting in a Central Policy Manager (CPM) policy?

  A. To control how often the CPM looks for system-initiated CPM work

  B. To control how often the CPM looks for user-initiated CPM work

  C. To control how long the CPM rests between password changes

  D. To control the maximum amount of time the CPM will wait for a password change to complete

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASREF/CPM%20Settings%20-%20Introduction.htm

• Question 42:

  Which of the following options is not set in the Master Policy?

  A. Password Expiration Date

  B. Dual Control

  C. Password Complexity

  D. Require Access Reason

  Correct Answer: C

• Question 43:

  CyberArk creates exceptions for Data Execution Prevention (DEP) on selected executable files. This is done as part of installing, which of the following components?

  A. PSM

  B. CPM

  C. PVWA

  D. AAM Credential Provider (previously known as AIM Credential Provider)

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/ Following-Central-Policy-Manager- Installation.htm

• Question 44:

  The PSM requires the Remote Desktop Web Access role service.

  A. True

  B. False

  Correct Answer: B

  The RDS that requires PSM is Remote Desktop Session Host.

  Remote Desktop Gateway, Remote Desktop Web Access, and Remote Desktop Licensing are incorrect.

• Question 45:

  Which of the following is considered a prerequisite for installing PSM?

  A. IIS web services role

  B. HTML5 Gateway

  C. Provider

  D. Remote Desktop Services

  Correct Answer: D

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Before- Installing-PSM.htm

• Question 46:

  The Remote Desktop Services role must be property licensed by Microsoft.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 47:

  When a DR vault server becomes an active vault, it will automatically fail bacK to the original state once the primary vault comes back online.

  A. True, this is the default behavior

  B. False, this is not possible

  C. True, if the 'AllowFailback' setting is set to yes in the PADR.ini file.

  D. True, if the 'AllowFailback' setting is set to yes in the dbparm ini file.

  Correct Answer: B

  There is no "Failback" parameter. When a failover happens, the ONLY way to fail back is a manual failback.

• Question 48:

  Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp. When the client's machine makes an RDP connection to the PSM server, which user will be utilized?

  A. Credentials stored in the Vault for the target machine

  B. Shadowuser

  C. PSMConnect

  D. PSMAdminConnect

  Correct Answer: C

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/MESSAGES/RDP% 20file%20and%20RemoteApp%20connections.htm

• Question 49:

  When using multiple Central Policy Managers (CPM), which one of the following Safes is shared by all CPMs?

  A. PasswordManagerSharedSafe

  B. PasswordManager_Pending

  C. PasswordManager_workspace

  D. PasswordManager_ADInternal

  Correct Answer: B

• Question 50:

  Which parameter controls how often the Central Policy Manager (CPM) looks for soon-to- be-expired passwords that need to be changed?

  A. HeadStartInterval

  B. Interval

  C. ImmediateInterval

  D. The CPM does not change the password under this circumstance

  Correct Answer: B