CyberArk CAU305 Online Practice Questions and Exam Preparation

CyberArk CAU305 Online Questions & Answers

• Question 51:

  What is the proper way to allow the Vault to resolve host names?

  A. Define a DNS server.
  B. Define a WINS server.
  C. Define the local hosts file.
  D. The Vault cannot resolve host names due to security standards.
  A. Define a DNS server.

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Configuring-Transparent-User-Management.htm

• Question 52:

  The PSM requires the Remote Desktop Web Access role service.

  A. True
  B. False
  A. True

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Before-Installing-PSM.htm

• Question 53:

  When managing SSH keys, the Central Policy Manager (CPM) stores the private key __________.

  A. in the Vault
  B. on the target server
  C. in the Vault and on the target server
  D. nowhere because the private key can always be generated from the public key
  A. in the Vault

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing%20SSH%20Keys.htm

• Question 54:

  For a Safe with object level access control enabled the Vault administrator is able to turn off object level access control when it no longer needed on the Safe.

  A. True
  B. False
  B. False

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Object-Level-Access-Control.htm

• Question 55:

  A Security Information and Event Management (SIEM) integration is a powerful way to correlate privileged account usage with privileged account activity.

  A. True
  B. False
  A. True

  ---

  Reference: https://www.cyberark.com/resources/blog/integrate-cyberark-with-a-siem-solution-gain-valuable-insights-about-advanced-threats

• Question 56:

  Which parameter controls how often the Central Policy Manager (CPM) looks for soon-to-be-expired passwords that need to be changed?

  A. HeadStartInterval
  B. Interval
  C. ImmediateInterval
  D. The CPM does not change the password under this circumstance.
  A. HeadStartInterval

  ---

  Reference: https://www.niap-ccevs.org/MMO/Product/st_vid11006-agd6.pdf

• Question 57:

  Which of the following Privileged Session Management (PSM) solutions provide a detailed audit log of session activities?

  A. PSM (i.e., launching connections by clicking on the connect button in the PVWA)
  B. PSM for Windows (previously known as RDP Proxy)
  C. PSM for SSH (previously known as PSM-SSH Proxy)
  D. All of the above
  B. PSM for Windows (previously known as RDP Proxy)

  ---

  Reference: https://www.cyberark.com/products/privileged-account-security-solution/privileged-session-manager/ https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring-the-Privileged-Session-Management-Interface.htm

• Question 58:

  Which is the purpose of a linked account?

  A. To ensure that a particular collection of accounts all have the same password.
  B. To ensure a particular set of accounts all change at the same time.
  C. To connect the CPM to a target system.
  D. To allow the use of additional passwords within a password management process.
  B. To ensure a particular set of accounts all change at the same time.

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Linked-Accounts.htm#:~:text=The%20linked%20accounts%20feature%20enables,to%20change%20the%20original%20password.andtext=When% 20the%20linked%20accounts%20are,of%20the%20Account%20Details%20page

• Question 59:

  DRAG DROP

  In version 10.7 the correct order of installation for components changed.

  Make the necessary corrections to the list below to show the new installation order.

  Select and Place:

  

  

• Question 60:

  Which onboarding method is used to integrate CyberArk with the accounts provisioning process?

  A. Accounts Discovery
  B. Auto Detection
  C. Onboarding RestAPI functions
  D. PTA rules
  B. Auto Detection

  ---

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Provisioning-Accounts-Automatically.htm