CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 41:

  What is the purpose of the password verify process?

  A. To test that CyberArk is storing accurate credentials for accounts.
  B. To change the password of an account according to organizationally defined password rules.
  C. To allow CyberArk to manage unknown or lost credentials.
  D. To generate a new complex password.
  A. To test that CyberArk is storing accurate credentials for accounts.

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Verifying- Passwords.htm#:~:text=The%20CPM%20can%20verify%20password,manually%20by%20 an%20authorized%20user.

• Question 42:

  During LDAP/S integration you should specify the Fully Qualified Domain Name (FQDN) of the Domain Controller.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

• Question 43:

  Which type of automatic remediation can be performed by the PTA in case of a suspicious password change security event?

  A. Password change
  B. Password reconciliation
  C. Session suspension
  D. Session termination
  A. Password change

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/Security- Configuration.htm

• Question 44:

  Which IP port and Protocol are used by the CyberArk Secure Proprietary Protocol?

  A. TCP/1858
  B. TCP/636
  C. UDP/1812
  D. TCP/22
  A. TCP/1858

• Question 45:

  An SNMP integration allows you to forward audit records from the vault to the SIEM.

  A. TRUE
  B. FALSE
  B. FALSE

  ---

  Explanation/Reference:

• Question 46:

  CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the-CyberArk-License.htm

• Question 47:

  When managing SSH keys, the Central Policy Manager (CPM) stores the private key.

  A. in the Vault
  B. on the target server
  C. in the Vault and on the target server
  D. nowhere because the private key can always be generated from the public key
  A. in the Vault

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing% 20SSH%20Keys.htm

• Question 48:

  All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe The members of the AD group UnixAdmms need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of OperationsManagers The members of OperationsManagers never need to be able to use the show, copy or connect buttons themselves.

  Which safe permissions do you need to grant to UnixAdmins? Check all that apply

  A. Use Accounts
  B. Retrieve Accounts
  C. List Accounts
  D. Authorize Password Requests
  E. Access Safe without Authorization
  C. List Accounts
  D. Authorize Password Requests

  ---

  Explanation/Reference:

  C = List Account, so that the group can view only the account

  D = To approve only requests. Since it is mentioned that OperationStaff need approval from the OperationsManager.

• Question 49:

  Multiple PVWA servers are always all active.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

• Question 50:

  A logon account can be specified in the platform settings.

  A. True
  B. False
  B. False

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring- Accounts-for-Automatic- Management.htm