[UPDATED 2022] CyberArk CAU201 Questions Prepare with Free Demo of PDF [Q91-Q113]

admin December 24, 2022 0 Comments

5/5 - (1 vote)

[UPDATED 2022] CyberArk CAU201 Questions Prepare with Free Demo of PDF

NEW 2022 Certification Sample Questions CAU201 Dumps & Practice Exam

How much CAU201 Exam Cost

The price of the CAU201 exam is $200 USD

CyberArk CAU201 Exam Syllabus Topics:

Topic	Details
Topic 1	Setup automatic verification, management, and reconciliation of passwords or SSH Keys Maintain an appropriate chain of custody for Encryption Keys
Topic 2	Configure the PSM to utilize the HTML5 Gateway Describe how each component communicates with others or devices on network at a high level
Topic 3	Configure the Master Policy to create PSM recordings Make a PSM for SSH Connection using an SSH Client
Topic 4	Setup text based or video based recordings on PSM Identify and locate component configuration files Explain the differences between a logon versus a reconcile account

Q91. When on-boarding account using Accounts Feed, which of the following is true?

You must specify an existing Safe where the account will be stored when it is on-boarded to the Vault.

You can specify the name of a new safe that will be created where the account will be stored when it is on-boarded to the Vault.

You can specify the name of a new Platform that will be created and associated with the account.

Any account that is on-boarded can be automatically reconciled regardless of the platform it is associated with.

Explanation/Reference:
Reference: https://www.cyberark.com/resource/automating-privileged-account-onboarding/

Q92. Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

Suspected credential theft

Over-Pass-The-Hash

Golden Ticket

Unmanaged privileged access

Q93. The System safe allows access to the Vault configuration files.

TRUE

FALSE

Q94. It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

TRUE

FALS

Explanation
Password reconciliation can be restricted to specific days. This means that the CPM will only reconcile passwords on the days of the week specified in the RCExecutionDays parameter. The days of the week are represented by the first 3 letters of the name of the day. Sunday is represented by Sun, Mondayby Mon, etc.

Q95. You have been asked to identify the up or down status of Vault services.
Which CyberArk utility can you use to accomplish this task?

Vault Replicator

PAS Reporter

Remote Control Agent

Syslog

Q96. It a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

Configure the Provider to change the password to match the Vault’s Password

Associate a reconcile account and configure the platform to reconcile automatically

Associate a logon account and configure the platform to reconcile automatically

Run the correct auto detection process to rediscover the password

Q97. It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

TRUE

FALS

Password reconciliation can be restricted to specific days. This means that the CPM will only reconcile passwords on the days of the week specified in the RCExecutionDays parameter. The days of the week are represented by the first 3 letters of the name of the day. Sunday is represented by Sun, Mondayby Mon, etc.

Q98. You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.
How should this be configured to allow for password management using least privilege?

Configure each CPM to use the correct logon account.

Configure each CPM to use the correct reconcile account.

Configure the UNIX platform to use the correct logon account.

Configure the UNIX platform to use the correct reconcile account.

Q99. Ifa password is changed manually on a server, bypassing the CPM, how would you configure theaccount so that the CPM could resume management automatically?

Configure the Provider to change the password to match the Vault’s Password

Associate a reconcile account and configure the platform to reconcile automatically

Associate a logonaccount and configure the platform to reconcile automatically

Run the correct auto detection process to rediscover the password

Q100. What is the purpose of the Immediate Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how often the CPM rests between password changes.

To Control the maximum amount of time the CPM will wait for a password change to complete.

When the Master Policy enforces check-in/check-out exclusive access, passwords are changed when the user clicks the Release button and releases the account. This is based on the ImmediateInterval parameter in the applied platform. If the user forgets to release the account, it is automatically released and changed by the CPM after a predetermined number of minutes, defined in the MinValidityPeriod parameter specified in the platform

Q101. Which of the following statements are NOT true when enabling PSM recording for a target Windows server?
Choose all that apply.

The PSM software must be installed on the target server.

PSM must be enabled in the Master Policy (either directly, or through exception).

PSMConnect must be added as a local user on the target server.

RDP must be enabled on the target server.

Q102. What is the purpose of the HeadStartlnterval setting m a platform?

It determines how far in advance audit data is collected tor reports

It instructs the CPM to initiate the password change process X number of days before expiration.

It instructs the AIM Provider to ‘skip the cache’ during the defined time period

It alerts users of upcoming password changesxnumber of days before expiration.

Q103. CyberArk recommends implementing object level access control on all Safes.

True

False

Q104. In order to connect to a target device through PSM, the account credentials used for the connection must be
stored in the vault?

True.

False. Because the user can also enter credentials manually using Secure Connect.

False. Because if credentials are not stored in the vault, the PSM will log into the target device as
PSMConnect.

False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

Q105. You want to generate a license capacity report.
Which tool accomplishes this?

Password Vault Web Access

PrivateArk Client

DiagnoseDB Report

RestAPI

Q106. You are onboarding an account that is not supported out of the box.
What should you do first to obtain a platform to import?

Create a service ticket in the customer portal explaining the requirements of the custom platform.

Search common community portals like stackoverflow, reddit, github for an existing platform.

From the platforms page, uncheck the “Hide non-supported platforms” checkbox and see if a platform meeting your needs appears.

Visit the CyberArk marketplace and search for a platform that meets your needs.

Q107. A newly created platform allows users to access a Linux endpoint. When users click to connect, nothing happens.
Which piece of the platform is missing?

PSM-SSH Connection Component

UnixPrompts.ini

UnixProcess.ini

PSM-RDP Connection Component

Q108. When managing SSH keys, the CPM stored the Private Key

In the Vault

On the target server

A & B

Nowhere because the private key can always be generated from the public key.

Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing%
20SSH%20Keys.htm

Q109. PSM for Windows (previously known as “RDP Proxy”) supports connections to the following target systems

Windows

UNIX

Oracle

All of the above

Explanation/Reference: https://knowhow.tajco-group.com/knowledge-base/using-a-standard-rdp-client-application/

Q110. All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the
accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and
connect buttons on those passwords at any time without confirmation. The members of the AD group
OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an
emergency basis, but only with the approval of a member of OperationsManagers. The members of
OperationsManagers never need to be able to use the show, copy or connect buttons themselves.
Which safe permissions do you need to grant to OperationsStaff? Check all that apply.

Use Accounts

Retrieve Accounts

List Accounts

Authorize Password Requests

Access Safe without Authorization

Explanation/Reference:

Q111. It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur

TRUE

FALS

Q112. An auditor initiates a live monitoring session to PSM server to view an ongoing live session. When the auditor’s machine makes an RDP connection the PSM server, which user will be used?

PSMAdminConnect

Shadowuser

PSMConnect

Credentials stored in the Vault for the target machine

Q113. Which CyberArk components products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

Discovery and Audit (DNA)

Auto Detection (AD)

Export Vault Data (EVD)

On Demand Privileges manager (OPM)

Accounts Discovery

Loading …

CAU201 Deluxe Study Guide with Online Test Engine: https://www.vcedumps.com/CAU201-examcollection.html

Tags: CAU201 free practice exams, CAU201 latest exam format, CAU201 latest exam pattern, CAU201 latest practice exam fee, CAU201 valid test cost, new CAU201 exam topics