Nov-2022 Pass Your CAU201 Exam at the First Try with 100% Real Exam
Get Real Exam Questions for CAU201 with New Questions
NEW QUESTION 83
Match the log file name with the CyberArk Component that generates the log.
Answer:
Explanation:
NEW QUESTION 84
For Digital Vault Cluster in a high availability configuration, how does the cluster determine if a node is down?
- A. An alert is generated in the Windows Event log.
- B. The heartbeat s no longer detected on the private network.
- C. The Digital Vault Cluster does not detect a node failure.
- D. The shared storage array is offline.
Answer: B
NEW QUESTION 85
Due to network activity, ACME Corp's PrivateArk Server became active on the OR Vault while the Primary Vault was also running normally. All the components continued to point to the Primary Vault.
Which steps should you perform to restore DR replication to normal?
- A. Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
- B. Shutdown PrivateArk Server on DR Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
- C. Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
- D. Shutdown PrivateArk Server on Primary Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault
Answer: A
NEW QUESTION 86
A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings.
What is the issue?
- A. The user is not a member of the Auditors group
- B. The user must login as PSMAdminConnect
- C. The PSM service is not running
- D. The user is not a member of the PVWAMonitor group
Answer: A
NEW QUESTION 87
What is the purpose of the Immediate Interval setting in a CPM policy?
- A. To control how often the CPM looks for System Initiated CPM work.
- B. To control how often the CPM looks for User Initiated CPM work.
- C. To Control the maximum amount of time the CPM will wait for a password change to complete.
- D. To control how often the CPM rests between password changes.
Answer: B
Explanation:
Explanation
When the Master Policy enforces check-in/check-out exclusive access, passwords are changed when the user clicks the Release button and releases the account. This is based on the ImmediateInterval parameter in the applied platform. If the user forgets to release the account, it is automatically released and changed by the CPM after a predetermined number of minutes, defined in the MinValidityPeriod parameter specified in the platform
NEW QUESTION 88
Match the built-in Vault User with the correct definition.
Answer:
Explanation:
Reference:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm?TocPath=Administration%7CUser%20Management%7C_____7
NEW QUESTION 89
You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to [b]change [/b] the root account's password the CPM will.....
- A. Log in to the system as root, then change root's password
- B. Log in to the system as the logon account, run the su command to log in as root, and then change root's password.
- C. Log in to the system as the logon account, then change roofs password
- D. None of these
Answer: B
NEW QUESTION 90
Target account platforms can be restricted to accounts that are stored in specific Safes using the AllowedSafes
property.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 91
Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?
- A. Accounts Discovery
- B. Auto Detection
- C. Onboarding RestAPI functions
- D. PTA Rules
Answer: B
NEW QUESTION 92
A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request.
What is the correct location to identify users or groups who can approve?
- A. PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests
- B. PVWA> Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers
- C. PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)
- D. PVWA> Administration > Platform Configuration > Edit Platform > UI & Workflow > Dual Control> Approvers
Answer: A
NEW QUESTION 93
When managing SSH keys, the CPM stored the Private Key
- A. A & B
- B. In the Vault
- C. On the target server
- D. Nowhere because the private key can always be generated from the public key.
Answer: B
NEW QUESTION 94
Which of the Following can be configured in the Master Poky? Choose all that apply.
- A. Password Reconciliation
- B. Ticketing Integration
- C. Custom Connection Components
- D. Password Aging Rules
- E. Exclusive Passwords
- F. One Time Passwords
- G. Dual Control
- H. Required Properties
Answer: D,E,F,G
NEW QUESTION 95
A logon account can be specified in the platform settings.
- A. True
- B. False
Answer: A
NEW QUESTION 96
Which item is an option for PSM recording customization?
- A. Custom audio recording for windows events
- B. Windows events text recorder and universal keystrokes recording simultaneously
- C. Universal keystrokes text recorder with windows events text recorder disabled
- D. Windows events text recorder with automatic play-back
Answer: A
NEW QUESTION 97
The System safe allows access to the Vault configuration files.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 98
Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply.
- A. PSM connections to target devices that are not managed by CyberArk.
- B. PSM connections from a terminal without the need to login to the PVWA.
- C. Session Recording.
- D. Real-time live session monitoring.
Answer: A,C,D
NEW QUESTION 99
For a safe with Object Level Access enabled you can turn off Object Level Access Control when it no longer needed on the safe.
- A. TRUE
- B. FALSE
Answer: B
Explanation:
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Object-Level- Access-Control.htm
NEW QUESTION 100
Platform settings are applied to______________.
- A. Safes
- B. Network Areas
- C. The entire vault.
- D. Individual Accounts
Answer: A
Explanation:
Explanation
Explanation/Reference: https://www.reddit.com/r/CyberARk/comments/avxnxz/safes_and_platform_association/
NEW QUESTION 101
In accordance with best practice, SSH access is denied for root accounts on UNIXLINUX system.
What is the BEST way to allow CPM to manage root accounts?
- A. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.
- B. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account of the target server's root account.
- C. Configure the CPM to allow SSH logins.
- D. Configure the Unix system to allow SSH logins.
Answer: A
NEW QUESTION 102
What is the primary purpose of One Time Passwords?
- A. Non-repudiation (individual accountability)
- B. Reduced risk of credential theft
- C. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.
- D. More frequent password changes
Answer: B
NEW QUESTION 103
Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.
- A. On Demand Privileges Manager (OPM)
- B. Discovery and Audit (DMA)
- C. Accounts Discovery
- D. Auto Detection (AD)
- E. Export Vault Data (EVD)
Answer: B,C,D
NEW QUESTION 104
......
Updated CAU201 Certification Exam Sample Questions: https://officialdumps.realvalidexam.com/CAU201-real-exam-dumps.html
