CyberArk CAU305 Online Practice Questions and Exam Preparation

CyberArk CAU305 Online Questions & Answers

• Question 1:

  Which of the following features are provided by Ad-Hoc Access (formerly Secure Connect)? (Choose three.)

  A. PSM connections to target devices that are not managed by CyberArk
  B. session recording
  C. real-time live session monitoring
  D. PSM connections from a terminal without the need to login to the Password Vault Web Access (PVWA)
  A. PSM connections to target devices that are not managed by CyberArk
  B. session recording
  C. real-time live session monitoring

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Connecting-with-Secure-Connect.htm

• Question 2:

  When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

  A. True, this is the default behavior.
  B. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file.
  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file.
  D. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the dbparm.ini file.
  A. True, this is the default behavior.

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/Initiating-DR-Failback-to-Production-Vault.htm

• Question 3:

  An auditor initiates a live monitoring session to PSM server to view an ongoing live session. When the auditor's machine makes an RDP connection the PSM server, which user will be used?

  A. PSMAdminConnect
  B. Shadowuser
  C. PSMConnect
  D. Credentials stored in the Vault for the target machine
  B. Shadowuser

• Question 4:

  Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

  A. Password change
  B. Password reconciliation
  C. Session suspension
  D. Session termination
  A. Password change

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/Security-Configuration.htm

• Question 5:

  Which user is automatically added to all Safes and cannot be removed?

  A. Auditor
  B. Administrator
  C. Master
  D. Operator
  C. Master

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm

• Question 6:

  The password upload utility must run from the Central Policy Manager (CPM) server.

  A. True
  B. False
  B. False

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Password-Upload-Utility.htm

• Question 7:

  When using multiple Central Policy Managers (CPM), which one of the following Safes is shared by all CPMs?

  A. PasswordManager
  B. PasswordManager_Pending
  C. PasswordManager_workspace
  D. PasswordManager_ADIntemal
  A. PasswordManager

  ---

  Reference: https://www.niap-ccevs.org/MMO/Product/st_vid11006-agd4.pdf (558)

• Question 8:

  Which file does the Vault administrator need to edit in order to configure the integration of the Vault with the radius server?

  A. radius.ini
  B. PARagent.ini
  C. ENEConf.ini
  D. dbparm.ini
  D. dbparm.ini

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/RADIUS-Authentication.htm

• Question 9:

  The password upload utility can be used to create Safes.

  A. True
  B. False
  A. True

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Password-Upload-Utility.htm#_Ref364685337

• Question 10:

  Which is the purpose of the allowed Safes parameter in a Central Policy Manager (CPM) policy? (Choose two.)

  A. To improve performance by reducing CPM workload
  B. To prevent accidental use of a policy in the wrong Safe
  C. To allow users to access only the passwords they should be able to access
  D. To enforce Least Privilege in CyberArk
  A. To improve performance by reducing CPM workload
  C. To allow users to access only the passwords they should be able to access