CyberArk CyberArk Certified Delivery Engineer CAU305 Questions & Answers

• Question 1:

  Time of day or day of week restrictions on when password reconciliations can occur are configured in the __________.

  A. Master Policy

  B. platform settings

  C. Safe settings

  D. account details

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASREF/Automatic%20Password%20Management%20-%20Password%20Reconciliation.htm

• Question 2:

  If a transparent user matches two different directory mappings, how does the system determine which user template to use?

  A. The system will use the template for the mapping listed first.

  B. The system will use the template for the mapping listed last.

  C. The system will grant all of the Vault authorizations from the two templates.

  D. The system will grant only the Vault authorizations that are listed in both templates.

  Correct Answer: A

• Question 3:

  The Vault can only integrate with a single Security Information and Event Management (SIEM) or SYSLOG server.

  A. True

  B. False

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Integrating-with-SIEM-Applications.htm

• Question 4:

  Multiple Password Vault Web Access (PVWA) servers can be load balanced.

  A. True

  B. False

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Password-Vault-Web-Access-Installation.htm

• Question 5:

  Which of the following is NOT a use case for installing multiple Central Policy Managers (CPM)?

  A. A single CPM cannot accommodate the total number of accounts managed.

  B. Accounts are managed in multiple sites or VLANs protected by firewall.

  C. Reduce network traffic across WAN links.

  D. Provide load-balancing capabilities when managing passwords on target devices.

  Correct Answer: A

• Question 6:

  A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

  A. True

  B. False

  Correct Answer: B

• Question 7:

  Which file is used to integrate the Vault with the RADIUS server?

  A. radius.ini

  B. PARagent.ini

  C. ENEConf.ini

  D. dbparm.ini

  Correct Answer: D

  Reference: https://docs.secureauth.com/pages/viewpage.action?pageId=40045055

• Question 8:

  What is the proper way to allow the Vault to resolve host names?

  A. Define a DNS server.

  B. Define a WINS server.

  C. Define the local hosts file.

  D. The Vault cannot resolve host names due to security standards.

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Configuring-Transparent-User-Management.htm

• Question 9:

  The password upload utility must run from the Central Policy Manager (CPM) server.

  A. True

  B. False

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Password-Upload-Utility.htm

• Question 10:

  Which is the purpose of the allowed Safes parameter in a Central Policy Manager (CPM) policy? (Choose two.)

  A. To improve performance by reducing CPM workload

  B. To prevent accidental use of a policy in the wrong Safe

  C. To allow users to access only the passwords they should be able to access

  D. To enforce Least Privilege in CyberArk

  Correct Answer: AC