CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 71:

  The vault supports a number of dual factor authentication methods.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 72:

  When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

  A. True, this is the default behavior.

  B. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file.

  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file.

  D. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the dbparm.ini file.

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Initiating-DR- Failback-to-Production- Vault.htm

• Question 73:

  The Vault can only integrate with a single Security Information and Event Management (SIEM) or SYSLOG server.

  A. True

  B. False

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/DV-Integrating- with-SIEM-Applications.htm

• Question 74:

  A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

  A. True

  B. False

  Correct Answer: A

• Question 75:

  Can you forward audit records to your monitoring solution via SIEM integration?

  A. Yes

  B. No

  Correct Answer: A

• Question 76:

  When is the transparent user provisioned initially in the vault?

  A. When a directory mapping matching that user id is created.

  B. When a vault admin completes the LDAP configuration wizard

  C. The first time the user logs in.

  D. During the vault's nightly LDAP refresh.

  Correct Answer: C

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Configuring-User-Management-via-LDAP.htm

  An LDAP user account is created the first time a user is referenced in one of the following situations:

  The user logs on to the Vault The user is added as a Safe member The user is added as a group member

• Question 77:

  An SMTP integration allows you to forward audit records from the vault to the SIEM.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 78:

  Which of the following components can be used to create a tape backup of the Vault?

  A. Disaster Recovery

  B. Distributed Vaults

  C. Replicate

  D. High Availability

  Correct Answer: C

  Reference: https://cyberark-customers.force.com/s/article/00001864

• Question 79:

  Multiple PVWA servers are always all active.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 80:

  In an SIEM integration it is recommended to use the fully-qualified domain name (FGDN) when specifying the SIEM server address(es).

  A. TRUE

  B. FALSE

  Correct Answer: A