CyberArk CAU305 Online Practice Questions and Exam Preparation

CyberArk CAU305 Online Questions & Answers

• Question 41:

  Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the domain controller during LDAP/S integration?

  A. PVWA > Platform Management > LDAP Integration
  B. PVWA > Administration > LDAP Integration
  C. PVWA > Administration > Options > LDAP Integration
  D. PVWA > LDAP Integration
  B. PVWA > Administration > LDAP Integration

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/LPLDAPIntegration.htm#:~:text=In%20the%20PVWA%2C%20click%20Administration,are%20created%20using%20this%20map

• Question 42:

  For the hardening process to complete successfully, the Vault administrator must ensure that the antivirus software on the Vault server is installed and up to date before running the installation.

  A. True
  B. False
  B. False

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Install-the-CyberArk-Vault-Normal-Installation.htm

• Question 43:

  Which file is used to integrate the Vault with the RADIUS server?

  A. radius.ini
  B. PARagent.ini
  C. ENEConf.ini
  D. dbparm.ini
  D. dbparm.ini

  ---

  Reference: https://docs.secureauth.com/pages/viewpage.action?pageId=40045055

• Question 44:

  If a user is a member of more than one group that has authorizations on a Safe, by default that user is granted __________.

  A. the Vault will not allow this situation to occur
  B. only those permissions that exist on the group added to the Safe first
  C. only those permissions that exist in all groups to which the user belongs
  D. the cumulative permissions of all the groups to which that user belongs
  B. only those permissions that exist on the group added to the Safe first

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-Groups.htm

• Question 45:

  Multiple Password Vault Web Access (PVWA) servers can be load balanced.

  A. True
  B. False
  A. True

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Password-Vault-Web-Access-Installation.htm

• Question 46:

  If a transparent user matches two different directory mappings, how does the system determine which user template to use?

  A. The system will use the template for the mapping listed first.
  B. The system will use the template for the mapping listed last.
  C. The system will grant all of the Vault authorizations from the two templates.
  D. The system will grant only the Vault authorizations that are listed in both templates.
  A. The system will use the template for the mapping listed first.

• Question 47:

  When a DR Vault Server becomes an active vault, it will automatically fail back to the original state once the Primary Vault comes back online.

  A. True, this is the default behavior.
  B. False, this is not possible.
  C. True, if the AllowFailback setting is set to "yes" in the padr.ini file.
  D. True, if the AllowFailback setting is set to "yes" in the dbparm.ini file.
  B. False, this is not possible.

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Initiating-DR-Failback-to-Production-Vault.htm

• Question 48:

  What are the functions of the Remote Control Agent service? (Choose three.)

  A. Allows remote monitoring the Vault
  B. Sends SNMP traps from the Vault
  C. Maintains audit data
  D. Allows CyberArk services to be managed (start/stop/status) remotely
  A. Allows remote monitoring the Vault
  B. Sends SNMP traps from the Vault
  D. Allows CyberArk services to be managed (start/stop/status) remotely

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Privileged-Account-Security-Remote-Administration.htm#:~:text=The%20CyberArk%20Vault%20Remote%20Control,and%20the% 20Disaster%20Recovery%20Server

• Question 49:

  To support a fault tolerant and high-availability architecture, the Password Vault Web Access (PVWA) servers must to be configured to communicate with the Primary Vault and Satellite Vaults. Which file needs to be changed on the PVWA to enable this setup?

  A. Vault.ini
  B. dbparm.ini
  C. pvwa.ini
  D. Satellite.ini
  A. Vault.ini

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Password-Vault-Web-Access-Installation.htm

• Question 50:

  The Vault can only integrate with a single Security Information and Event Management (SIEM) or SYSLOG server.

  A. True
  B. False
  B. False

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Integrating-with-SIEM-Applications.htm