CyberArk CyberArk Certifications CAU302 Questions & Answers

• Question 81:

  A SIEM integration is a powerful way to correlate Privileged Account Usage with Privileged Account Activity.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 82:

  Multiple Vault Servers can be load balanced.

  A. True

  B. False

  Correct Answer: B

• Question 83:

  During the process of installing the Central Policy Manager (CPM), the Vault administrator will be asked to provide the credentials for an administrative user in the Vault. For which purpose are these credentials used?

  A. The credentials will be used later by the CPM to retrieve passwords from the Vault.

  B. The credentials are used by the installer to register the CPM in the CyberArk database.

  C. The credentials are used by the installer to authenticate to the Vault and create the Central Policy Manager (CPM) environment (Safes, users, etc.).

  D. The credentials will be used later by the CPM to update passwords in the Vault.

  Correct Answer: C

• Question 84:

  In order to grant a permission to a user, and administrator MUST possess that permission.

  A. True

  B. False

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing- Users.htm

• Question 85:

  One time passwords reduce the risk of Pass the Hash vulnerabilities in Windows.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 86:

  A Vault Administrator wants to change the PSM Server ID to comply with a naming standard What is the process for changing the PSM Server ID?

  A. First, logon to the PrivateArk Client as Administrator and open the PVWAConfig safe. Retrieve and edit the PVConfiguration.xml file. Search for the PSMServer Name and update the ID of the server you want to rename Save the file and copy back to the PVWAConfig safe. Restart the "CyberArk Privileged Session Manager" service on the PSM server.

  B. Login to the PVWA. then change the PSMServer ID in Administration. System Configuration. Options, Privileged Session Management. Configured PSM Servers Run an IISRESET on all PVWA servers.

  C. First, login to the PVWA. browse to Administration. System Configuration. Options. Pnvileged Session Management. Configured PSM Servers and select the PSM Server you need to change from the list of servers In the properties pane, set the value of the ID property to the new Server ID. click Apply and OK. Next, edit the basic_psm.ini file located on the PSM server in the PSM root directory and update the PSMServerlD parameter with the new Server ID. save the file and restart the "CyberArk Privileged Session Manager" service on the PSM server

  D. Options A and B above is the correct procedure

  Correct Answer: C

  Explanation: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Optional-Changing-the-PSM- Server-ID.htm

• Question 87:

  An SNMP integration allows you to forward audit records from the vault to the SIEM.

  A. TRUE

  B. FALSE

  Correct Answer: B

• Question 88:

  SAFE Authorizations may be granted to___________________.

  A. Vault Users

  B. Vault Groups

  C. LDAP Users

  D. LDAP Groups

  E. All of above

  Correct Answer: E

  https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Safes-add-a-safe-member.htm

• Question 89:

  The vault server uses a modified version of the Microsoft Windows firewall.

  A. TRUE

  B. FALSE

  Correct Answer: A

• Question 90:

  Which service is optional on the Vault?

  A. PrivateArk Server

  B. PrivateArk Remote Control Agent

  C. PrivateArk Database

  D. CyberArk Hardened Windows Firewall

  Correct Answer: B

  Reference: https://www.niap-ccevs.org/MMO/Product/st_vid11006-agd5.pdf