CyberArk CyberArk Certified Delivery Engineer CAU305 Questions & Answers

• Question 51:

  What is the purpose of the password verify process?

  A. To test that CyberArk is storing accurate credentials for accounts.

  B. To change the password of an account according to organizationally defined password rules.

  C. To allow CyberArk to manage unknown or lost credentials.

  D. To generate a new complex password.

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Verifying-Passwords.htm#:~:text=The%20CPM%20can%20verify%20password,manually%20by%20an%20authorized%20user

• Question 52:

  During the process of installing the Central Policy Manager (CPM), the Vault administrator will be asked to provide the credentials for an administrative user in the Vault. For which purpose are these credentials used?

  A. The credentials will be used later by the CPM to retrieve passwords from the Vault.

  B. The credentials are used by the installer to register the CPM in the CyberArk database.

  C. The credentials are used by the installer to authenticate to the Vault and create the Central Policy Manager (CPM) environment (Safes, users. etc.).

  D. The credentials will be used later by the CPM to update passwords in the Vault.

  Correct Answer: C

• Question 53:

  The PSM requires the Remote Desktop Web Access role service.

  A. True

  B. False

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Before-Installing-PSM.htm

• Question 54:

  Access control to passwords is implemented by __________.

  A. Vault authorizations

  B. Safe authorizations

  C. Master Policy

  D. platform settings

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Object-Level-Access-Control.htm

• Question 55:

  When managing SSH keys, the Central Policy Manager (CPM) stores the private key __________.

  A. in the Vault

  B. on the target server

  C. in the Vault and on the target server

  D. nowhere because the private key can always be generated from the public key

  Correct Answer: A

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing%20SSH%20Keys.htm

• Question 56:

  In a Distributed Vaults environment, which of the following components will NOT be communicating with the Satellite Vaults?

  A. AAM Credential Provider (previously known as AIM Credential Provider)

  B. ExportVaultData utility

  C. PAReplicate utility

  D. Central Policy Manager

  Correct Answer: D

• Question 57:

  What are the functions of the Remote Control Agent service? (Choose three.)

  A. Allows remote monitoring the Vault

  B. Sends SNMP traps from the Vault

  C. Maintains audit data

  D. Allows CyberArk services to be managed (start/stop/status) remotely

  Correct Answer: ABD

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/Privileged-Account-Security-Remote-Administration.htm#:~:text=The%20CyberArk%20Vault%20Remote%20Control,and%20the% 20Disaster%20Recovery%20Server

• Question 58:

  When using multiple Central Policy Managers (CPM), which one of the following Safes is shared by all CPMs?

  A. PasswordManager

  B. PasswordManager_Pending

  C. PasswordManager_workspace

  D. PasswordManager_ADIntemal

  Correct Answer: A

  Reference: https://www.niap-ccevs.org/MMO/Product/st_vid11006-agd4.pdf (558)

• Question 59:

  Which file is used to open up a non-standard firewall port to the Vault?

  A. dbparm.ini

  B. PARagent.ini

  C. passparm.ini

  D. Vault.ini

  Correct Answer: A

• Question 60:

  Which onboarding method is used to integrate CyberArk with the accounts provisioning process?

  A. Accounts Discovery

  B. Auto Detection

  C. Onboarding RestAPI functions

  D. PTA rules

  Correct Answer: B

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Provisioning-Accounts-Automatically.htm