CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 71:

  In order to grant a permission to a user, and administrator MUST possess that permission.

  A. True
  B. False
  B. False

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing- Users.htm

• Question 72:

  Two-factor authentication can be implemented by integrating the Vault with a RADIUS server configured to require PIN and token.

  A. True
  B. False
  A. True

  ---

  Explanation/Reference:

  Reference: https://www.rsa.com/content/dam/en/use-case/modern-mfa-for-cyberark.pdf

• Question 73:

  PSM captures a record of each command that was executed in Unix.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 74:

  Which parameter controls how often the Central Policy Manager (CPM) looks for soon-to- be-expired passwords that need to be changed?

  A. HeadStartInterval
  B. Interval
  C. ImmediateInterval
  D. The CPM does not change the password under this circumstance
  B. Interval

  ---

  Explanation/Reference:

• Question 75:

  In order to retrieve data from the vault a user MUST use an interface provided by CyberArk.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 76:

  In the vault each password is encrypted with a unique encryption key.

  A. TRUE
  B. FALSE
  A. TRUE

• Question 77:

  Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests?

  A. HeadStartInterval
  B. Interval
  C. ImmediateInterval
  D. The CPM does not change the password under this circumstance
  D. The CPM does not change the password under this circumstance

  ---

  Explanation/Reference:

• Question 78:

  What is the chief benefit of PSM?

  A. Privileged session isolation
  B. Automatic password management
  C. Privileged session recording
  D. Privileged session isolation and privileged session recording
  D. Privileged session isolation and privileged session recording

  ---

  Explanation/Reference:

  As per CyberArk PAM Admin course, Privileged Session Management provides three main benefits : Isolation Monitoring Recording

• Question 79:

  The Vault Internal safe contains the configuration for an LDAP integration.

  A. TRUE
  B. FALSE
  A. TRUE

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASREF/LDAP%20Integration%20-%20Introduction.htm?Highlight=Vaultinternal#LDAPIntegration

  The LDAP integration parameters specify information required by the CyberArk Vault to recognize external directories and create User accounts and Groups. A different set of directory configurations define each external directory that the

  Vault will work with.

  After each LDAP directory has been configured in the PVWA, these parameters are stored in the LDAPConf.xml in the VaultInternal Safe. Do not modify the parameters directly in these files.

• Question 80:

  You are successfully managing passwords in the alpha.cyberark com domain; however when you attempt to manage a password in the beta.cyberark.com domain, you receive the 'network path not found* error. What should you check first?

  A. That the username and password are correct.
  B. That the CPM can successfully resolve addresses in the beta cyberark com domain
  C. That the end user has the correct permissions on the safe
  D. That an appropriate trust relationship exists between alphaxyberark.com and beta.cyberark.com
  B. That the CPM can successfully resolve addresses in the beta cyberark com domain

  ---

  Explanation/Reference: