CyberArk CAU305 Online Practice Questions and Exam Preparation

CyberArk CAU305 Online Questions & Answers

• Question 1:

  Time of day or day of week restrictions on when password reconciliations can occur are configured in the __________.

  A. Master Policy
  B. platform settings
  C. Safe settings
  D. account details
  B. platform settings

  ---

  explanation:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASREF/Automatic%20Password%20Management%20-%20Password%20Reconciliation.htm

• Question 2:

  If a transparent user matches two different directory mappings, how does the system determine which user template to use?

  A. The system will use the template for the mapping listed first.
  B. The system will use the template for the mapping listed last.
  C. The system will grant all of the Vault authorizations from the two templates.
  D. The system will grant only the Vault authorizations that are listed in both templates.
  A. The system will use the template for the mapping listed first.

• Question 3:

  The Vault can only integrate with a single Security Information and Event Management (SIEM) or SYSLOG server.

  A. True
  B. False
  B. False

  ---

  explanation:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Integrating-with-SIEM-Applications.htm

• Question 4:

  Multiple Password Vault Web Access (PVWA) servers can be load balanced.

  A. True
  B. False
  A. True

  ---

  explanation:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Password-Vault-Web-Access-Installation.htm

• Question 5:

  Which of the following is NOT a use case for installing multiple Central Policy Managers (CPM)?

  A. A single CPM cannot accommodate the total number of accounts managed.
  B. Accounts are managed in multiple sites or VLANs protected by firewall.
  C. Reduce network traffic across WAN links.
  D. Provide load-balancing capabilities when managing passwords on target devices.
  A. A single CPM cannot accommodate the total number of accounts managed.

• Question 6:

  A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

  A. True
  B. False
  B. False

• Question 7:

  Which file is used to integrate the Vault with the RADIUS server?

  A. radius.ini
  B. PARagent.ini
  C. ENEConf.ini
  D. dbparm.ini
  D. dbparm.ini

  ---

  explanation:

  Reference: https://docs.secureauth.com/pages/viewpage.action?pageId=40045055

• Question 8:

  What is the proper way to allow the Vault to resolve host names?

  A. Define a DNS server.
  B. Define a WINS server.
  C. Define the local hosts file.
  D. The Vault cannot resolve host names due to security standards.
  A. Define a DNS server.

  ---

  explanation:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Configuring-Transparent-User-Management.htm

• Question 9:

  The password upload utility must run from the Central Policy Manager (CPM) server.

  A. True
  B. False
  B. False

  ---

  explanation:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Password-Upload-Utility.htm

• Question 10:

  Which is the purpose of the allowed Safes parameter in a Central Policy Manager (CPM) policy? (Choose two.)

  A. To improve performance by reducing CPM workload
  B. To prevent accidental use of a policy in the wrong Safe
  C. To allow users to access only the passwords they should be able to access
  D. To enforce Least Privilege in CyberArk
  A. To improve performance by reducing CPM workload
  C. To allow users to access only the passwords they should be able to access