CyberArk CAU302 Online Practice Questions and Exam Preparation

CyberArk CAU302 Online Questions & Answers

• Question 81:

  An Auditor needs to login to the PSM in order to live monitor an active session. Which User ID is used to establish the RDP connection to the PSM server?

  A. PSMConnect
  B. PSMMaster
  C. PSMGwUser
  D. PSMAdminConnect
  D. PSMAdminConnect

  ---

  Explanation/Reference:

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Optional-Moving-the-PSMConnec-and-PSMAdminConnect-users-to-your-Domain.htm#ConfiguretheRemoteDesktopSessiononthePSM

• Question 82:

  Which of the following components can be used to create a tape backup of the Vault?

  A. Disaster Recovery
  B. Distributed Vaults
  C. Replicate
  D. High Availability
  C. Replicate

  ---

  Explanation/Reference:

  Reference: https://cyberark-customers.force.com/s/article/00001864

• Question 83:

  What are the operating system prerequisites for installing CPM? Select all that apply.

  A. .NET 3.51 Framework Feature
  B. Web Services Role
  C. Remote Desktop Services Role
  D. Windows 2008 R2 or higher
  A. .NET 3.51 Framework Feature

  ---

  Explanation/Reference:

• Question 84:

  Which of the following are secure options for storing the contents of the Operator CD. while still allowing the contents to be accessible upon a planned Vault restart? Choose alt that apply

  A. Store the CD in a physical safe and mount the CD every time vault maintenance is performed.
  B. Copy the contents of the CD to the System Safe on the vault
  C. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.
  D. Store the server key in a Hardware Security Module.
  E. Store the server key in the Provider cache
  A. Store the CD in a physical safe and mount the CD every time vault maintenance is performed.
  C. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.
  D. Store the server key in a Hardware Security Module.

• Question 85:

  Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp. When the client's machine makes an RDP connection to the PSM server, which user will be utilized?

  A. Credentials stored in the Vault for the target machine
  B. Shadowuser
  C. PSMConnect
  D. PSMAdminConnect
  C. PSMConnect

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/MESSAGES/RDP% 20file%20and%20RemoteApp%20connections.htm

• Question 86:

  Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the domain controller during LDAP/S integration?

  A. PVWA > Platform Management > LDAP Integration
  B. PVWA > Administration > LDAP Integration
  C. PVWA > Administration > Options > LDAP Integration
  D. PVWA > LDAP Integration
  B. PVWA > Administration > LDAP Integration

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/ LPLDAPIntegration.htm

• Question 87:

  What is the maximum number of levels of authorizations you can set up in Dual Control?

  A. 1
  B. 2
  C. 3
  D. 4
  B. 2

  ---

  Explanation/Reference:

  Require multi-level password access approval – This advanced setting enforces an access control workflow in which end users require two levels of authorization before they can access privileged accounts. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PVWA-Dual-Control.htm

• Question 88:

  Which report could show all audit data in the vault?

  A. Privileged Account Compliance Status Report
  B. Activity Log
  C. Privileged Account Inventory Report
  D. Application Inventory Report
  B. Activity Log

  ---

  Explanation/Reference:

  A log of all the activities that have taken place in the Safes. This report can be filtered according to user, target system, specified period, and a variety of other criteria.

  Authorized users can view a list of changes that have been made in the Master Policy by generating an Activities report. This includes changes made in Master Policy rules, as well as adding, modifying, and deleting exceptions.

• Question 89:

  A SIEM integration allows you to forward audit records to a monitoring solution.

  A. TRUE
  B. FALSE
  B. FALSE

  ---

  Explanation/Reference:

• Question 90:

  Which type of automatic remediation can be performed by the PTA in case of a Suspecious Password Change security event?

  A. Password Change
  B. Password Reconcilation
  C. Session Suspension
  D. Session Terminiation
  A. Password Change