CyberArk CAU201 Exam Dumps

CyberArk CAU201 Sample Question Answers

Question # 1

Customers who have the ‘Access Safe without confirmation’ safe permission on a safewhere accounts are configured for Dual control, still need to request approval to use theaccount.

A. TRUE 
B. FALSE 

Show Answer

Question # 2

What is the easiest way to duplicate an existing platform?

A. From PrivateArk, copy/paste the appropriate Policy.ini file; then rename it. 
B. From the PVWA, navigate to the platforms page, select an existing platform that issimilar to the new target account platform and then click Duplicate; name the new platform. 
C. From PrivateArk, copy/paste the appropriate settings in PVConfiguration.xml; thenupdate the policyName variable. 
D. From the PVWA, navigate to the platforms page, select an existing platform that issimilar to the new target account platform, manually update the platform settings and click“Save as” INSTEAD of save to duplicate and rename the platform. 

Show Answer

Question # 3

You are onboarding an account that is not supported out of the box.What should you do first to obtain a platform to import?

A. Create a service ticket in the customer portal explaining the requirements of the customplatform. 
B. Search common community portals like stackoverflow, reddit, github for an existingplatform. 
C. From the platforms page, uncheck the “Hide non-supported platforms” checkbox andsee if a platform meeting your needs appears. 
D. Visit the CyberArk marketplace and search for a platform that meets your needs. 

Show Answer

Question # 4

You are creating a new Rest API user that utilizes CyberArk Authentication.What is a correct process to provision this user?

A. Private Ark Client > Tools > Administrative Tools > Users and Groups > New > User 
B. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Add 
C. PVWA > User Provisioning > LDAP Integration > Add Mapping 
D. PVWA > User Provisioning > Users and Groups > New > User

Show Answer

Question # 5

You want to generate a license capacity report.Which tool accomplishes this?

A. Password Vault Web Access 
B. PrivateArk Client 
C. DiagnoseDB Report 
D. RestAPI 

Show Answer

Question # 6

PTA can automatically suspend sessions if suspicious activities are detected in a privilegedsession, but only if the session is made via the CyberArk PSM.

A. True 
B. False, the PTA can suspend sessions whether the session is made via the PSM or not 

Show Answer

Question # 7

In a rule using “Privileged Session Analysis and Response” in PTA, which session optionsare available to configure as responses to activities?

A. Suspend, Terminate, None 
B. Suspend, Terminate, Lock Account 
C. Pause, Terminate, None 
D. Suspend, Terminate 

Show Answer

Question # 8

According to the DEFAULT Web Options settings, which group grants access to theREPORTS page?

A. PVWAUsers 
B. Vault Admins 
C. Auditors 
D. PVWAMonitor 

Show Answer

Question # 9

Which of the Following can be configured in the Master Poky? Choose all that apply.

A. Dual Control 
B. One Time Passwords 
C. Exclusive Passwords 
D. Password Reconciliation 
E. Ticketing Integration 
F. Required Properties 
G. Custom Connection Components 
H. Password Aging Rules 

Show Answer

Question # 10

The Accounts Feed contains:

A. Accounts that were discovered by CyberArk in the last 30 days 
B. Accounts that were discovered by CyberArk that have not yet been onboarded 
C. All accounts added to the vault in the last 30 days 
D. All users added to CyberArk in the last 30 days 

Show Answer

Question # 11

Which command configures email alerts within PTA if settings need to be changed postinstall?

A. /opt/tomcat/utility/emailConfiguration.sh 
B. /opt/PTA/emailConfiguration.sh 
C. /opt/PTA/utility/emailConfig.sh 
D. /opt/tomcat/utility/emailSetup.sh 

Show Answer

Question # 12

You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover thatthe CPM is unable to log in directly with the root account and will need to use a secondaryaccount.How should this be configured to allow for password management using least privilege?

A. Configure each CPM to use the correct logon account. 
B. Configure each CPM to use the correct reconcile account. 
C. Configure the UNIX platform to use the correct logon account. 
D. Configure the UNIX platform to use the correct reconcile account. 

Show Answer

Question # 13

Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix systemwhen SSH access for root is denied?

A. Yes, when using the connect button, CyberArk uses the PMTerminal.exe process whichbypasses the root SSH restriction. 
B. Yes, only if a logon account is associated with the root account and the user connectsthrough the PSM-SSH connection component. 
C. Yes, if a logon account is associated with the root account. 
D. No, it is not possible. 

Show Answer

Question # 14

It is possible to leverage DNA to provide discovery functions that are not available withauto-detection.

A. TRUE 
B. FALS 

Show Answer

Question # 15

When on-boarding account using Accounts Feed, Which of the following is true?

A. You must specify an existing Safe where are account will be stored when it is onboarded to the Vault 
B. You can specify the name of a new sale that will be created where the account will bestored when it is on-boarded to the Vault. 
C. You can specify the name of a new Platform that will be created and associated with theaccount 
D. Any account that is on boarded can be automatically reconciled regardless of theplatform it is associated with. 

Show Answer

Question # 16

Which of the following Privileged Session Management (PSM) solutions support livemonitoring of active sessions?

A. PSM (i.e., launching connections by clicking on the connect button in the PasswordVault Web Access (PVWA) 
B. PSM for Windows (previously known as RDP Proxy) 
C. PSM for SSH (previously known as PSM-SSH Proxy) 
D. All of the above 

Show Answer

Question # 17

A new HTML5 Gateway has been deployed in your organization.Where do you configure the PSM to use the HTML5 Gateway?

A. Administration > Options > Privileged Session Management > Configured PSM Servers> Connection Details > Add PSM Gateway 
B. Administration > Options > Privileged Session Management > Add Configured PSMGateway Servers 
C. Administration > Options > Privileged Session Management > Configured PSM Servers> Add PSM Gateway 
D. Administration > Options > Privileged Session Management > Configured PSM Servers> Connection Details 

Show Answer

Question # 18

For an account attached to a platform that requires Dual Control based on a Master Policyexception, how would you configure a group of users to access a password withoutapproval.

A. Create an exception to the Master Policy to exclude the group from the workflowprocess. 
B. Edith the master policy rule and modify the advanced’ Access safe without approval’ ruleto include the group. 
C. On the safe in which the account is stored grant the group the’ Access safe withoutaudit’ authorization. 
D. On the safe in which the account is stored grant the group the’ Access safe withoutconfirmation’ authorization. 

Show Answer