CyberArk CAU305 Online Practice Questions and Exam Preparation

CyberArk CAU305 Online Questions & Answers

• Question 21:

  In a Distributed Vaults environment, which of the following components will NOT be communicating with the Satellite Vaults?

  A. AAM Credential Provider (previously known as AIM Credential Provider)
  B. ExportVaultData utility
  C. PAReplicate utility
  D. Central Policy Manager
  D. Central Policy Manager

• Question 22:

  What is the purpose of the password verify process?

  A. To test that CyberArk is storing accurate credentials for accounts.
  B. To change the password of an account according to organizationally defined password rules.
  C. To allow CyberArk to manage unknown or lost credentials.
  D. To generate a new complex password.
  A. To test that CyberArk is storing accurate credentials for accounts.

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Verifying-Passwords.htm#:~:text=The%20CPM%20can%20verify%20password,manually%20by%20an%20authorized%20user

• Question 23:

  During the process of installing the Central Policy Manager (CPM), the Vault administrator will be asked to provide the credentials for an administrative user in the Vault. For which purpose are these credentials used?

  A. The credentials will be used later by the CPM to retrieve passwords from the Vault.
  B. The credentials are used by the installer to register the CPM in the CyberArk database.
  C. The credentials are used by the installer to authenticate to the Vault and create the Central Policy Manager (CPM) environment (Safes, users. etc.).
  D. The credentials will be used later by the CPM to update passwords in the Vault.
  C. The credentials are used by the installer to authenticate to the Vault and create the Central Policy Manager (CPM) environment (Safes, users. etc.).

• Question 24:

  What is the purpose of the password reconcile process?

  A. To test that CyberArk is storing accurate credentials for accounts.
  B. To change the password of an account according to organizationally defined password rules.
  C. To allow CyberArk to manage unknown or lost credentials.
  D. To generate a new complex password.
  A. To test that CyberArk is storing accurate credentials for accounts.

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Reconciling-Passwords.htm#:~:text=If%20the%20verification%20process%20discovers,automatically%2C%20without%20any%20manual% 20intervention

• Question 25:

  Any user can monitor live sessions in real time when initiating RDP connection via Secure Connect through PSM.

  A. True
  B. False
  B. False

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring-the-Privileged-Session-Management-Interface.htm

• Question 26:

  Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the target email server during Simple Mail Transfer Protocol (SMTP) integration?

  A. PVWA > Platform Management > Notification Settings
  B. PVWA > Options > Notification Settings
  C. PVWA > Administration > Notification Settings
  D. PVWA > LDAP Integration > Notification Settings
  C. PVWA > Administration > Notification Settings

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring-Email-Notification.htm

• Question 27:

  What is the purpose of the CyberArk Event Notification Engine service?

  A. It sends email messages from the Central Policy Manager (CPM).
  B. It sends email messages from the Vault.
  C. It processes audit report messages.
  D. It makes Vault data available to components.
  B. It sends email messages from the Vault.

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/Event-Notification-Engine.htm#:~:text=The%20Event%20Notification%20Engine%20(ENE,server%20installation%20as%20a%20service

• Question 28:

  Which of the following is considered a prerequisite for installing PSM?

  A. IIS web services role
  B. HTML5 Gateway
  C. Provider
  D. Remote Desktop Services
  D. Remote Desktop Services

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Before-Installing-PSM.htm

• Question 29:

  After the Vault server is installed, the Microsoft Windows firewall is now commandeered by the Vault.

  Can the administrator change these firewall rules?

  A. Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the Vault.
  B. Yes, the administrator can still modify firewall rules via the Windows firewall interface.
  C. No, the Vault does not permit any changes to the firewall due to security requirements.
  D. Yes, but the administrator can only modify the firewall rules by editing the FirewallRules.ini file and the restarting the Vault.
  A. Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the Vault.

• Question 30:

  Which file is used to configure the ENE service?

  A. ENE.ini
  B. ENEConfig.ini
  C. dbparm.ini
  D. PARagent.ini
  A. ENE.ini

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.3/en/Content/PASIMP/Event-Notification-Engine.htm