CAU302 by CyberArk Valid Free Exam Practice Test

Question 1

What conditions must be met in order to log into the vault as the Master user? Select all that apply

A. Logon must satisfy a challange response request B. User must provide the correct master password C. Logon requires the Recovery Private Key to be accessible to the vault D. Logon must be originated from the console of the Vault server or an EmergencyStation defined in DBParm.ini

Correct Answer: B,D

Question 2

When managing SSH keys. CPM automatically pushes the Public Key to the target system.

A. FALSE B. TRUE

Correct Answer: B

Question 3

SAFE Authorizations may be granted to___________________.
Select all that apply.

A. LDAP Users B. Vault Users C. Vault Groups D. LDAP Groups

Correct Answer: D

Question 4

What is the name of the Platform parameter that determines the amount of time a person is allowed to use a One Time Password?

A. ImmediateInterval B. MinValidityPeriod C. Interval D. Timeout

Correct Answer: B

Question 5

Which utility can be used to copy a server key to an HSM?

A. CAVaultManager.exe B. ChangeServerKeys.exe C. A proprietary utility provided by the HSM Vendor D. PrivateArk Client

Correct Answer: C

Question 6

Users complain they are unsuccessful attempting to authenticate to the PVWA web site. After entering their credentials, they receive a "Timeout has expired". You test the URL using multiple browsers and receive the same error. The CyberArk.WebApplication.log shows the "ITACM012S Timeout has expired" log entry.
What is the next troubleshooting step you should take?

A. Check the health of the Vault Server and ensure all services are running B. Check the CyberArk.WebConsole.log for errors C. Run an IISRESET on the PVWA server D. Check network firewall rules to ensure the PVWA can communicate to the Vault over tcp_1858

Correct Answer: D

Question 7

A Logon Account can be specified in the Master Policy

A. FALSE B. TRUE

Correct Answer: B

Question 8

Which CyberArk components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts'? Select all that apply.

A. Accounts Discovery B. On Demand Privileges Manager (OPM) C. Discovery and Audit (DNA) D. Export Vault Data (EVD) E. Auto Detection (AD)

Correct Answer: A,B,D

Question 9

It is possible to restrict the time of day. or day of week that a change process can occur

A. FALSE B. TRUE

Correct Answer: B

Question 10

A safe was recently created by a user who is a member of the LDAP Vault Administrators group. Which of the following users does not have access to the newly created safe by default?

A. Backup B. Auditor C. Administrator D. Master

Correct Answer: A

Question 11

A SIEM integration allows you to forward ITALOG records to a monitoring solution.

A. FALSE B. TRUE

Correct Answer: A

Question 12

In the vault each password is encrypted with a unique encryption key.

A. FALSE B. TRUE

Correct Answer: B

Question 13

The Vault Internal safe contains the configuration for an LDAP integration

A. FALSE B. TRUE

Correct Answer: A

Question 14

What are the operating system prerequisites for installing CPM? Select all that apply.

A. Web Services Role B. NET 3.51 Framework Feature C. Windows 2008 R2 or higher D. Remote Desktop Services Role

Correct Answer: B

CyberArk Defender + Sentry - CAU302 Exam Practice Test