2023 Realistic Verified Free CyberArk CAU201 Exam Questions
CAU201 Real Exam Questions and Answers FREE
The CyberArk CAU201 exam is intended for individuals who are responsible for managing and securing privileged accounts, such as security analysts, system administrators, and IT professionals. The exam covers a wide range of topics, including CyberArk core components, password management, session management, and threat detection. It also tests an individual's ability to configure and manage CyberArk solutions, as well as their understanding of best practices in privileged access management.
NEW QUESTION # 56
When on-boarding account using Accounts Feed, which of the following is true?
- A. You must specify an existing Safe where the account will be stored when it is on-boarded to the Vault.
- B. You can specify the name of a new Platform that will be created and associated with the account.
- C. You can specify the name of a new safe that will be created where the account will be stored when it is on- boarded to the Vault.
- D. Any account that is on-boarded can be automatically reconciled regardless of the platform it is associated with.
Answer: B
Explanation:
Explanation/Reference: https://www.cyberark.com/resource/automating-privileged-account-onboarding/
NEW QUESTION # 57
Which CyberArk components products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.
- A. Export Vault Data (EVD)
- B. On Demand Privileges manager (OPM)
- C. Auto Detection (AD)
- D. Accounts Discovery
- E. Discovery and Audit (DNA)
Answer: D,E
NEW QUESTION # 58
What is the purpose of the Immediate Interval setting in a CPM policy?
- A. To control how often the CPM looks for System Initiated CPM work.
- B. To control the maximum amount of time the CPM will wait for a password change to complete.
- C. To control how often the CPM looks for User Initiated CPM work.
- D. To control how long the CPM rests between password changes.
Answer: D
NEW QUESTION # 59
You are creating a shared safe for the help desk.
What must be considered regarding the naming convention?
- A. Safe owners should determine the safe name to enable them to easily remember it.
- B. The use of these characters V:*<>".| is not allowed.
- C. Combine environments, owners and platforms to minimize the total number of safes created.
- D. Ensure your naming convention is no longer than 20 characters.
Answer: B
NEW QUESTION # 60
Which of the Following can be configured in the Master Poky? Choose all that apply.
- A. Exclusive Passwords
- B. Custom Connection Components
- C. Password Reconciliation
- D. Ticketing Integration
- E. Dual Control
- F. One Time Passwords
- G. Password Aging Rules
- H. Required Properties
Answer: A,C,G,H
NEW QUESTION # 61
Which CyberArk group does a user need to be part of to view recordings or live monitor sessions?
- A. DR Users
- B. Auditors
- C. Operators
- D. Vault Admin
Answer: B
NEW QUESTION # 62
Which of these accounts onboarding methods is considered proactive?
- A. A Rest API integration with account provisioning software
- B. Accounts Discovery
- C. A DNA scan
- D. Detecting accounts with PTA
Answer: D
NEW QUESTION # 63
It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur
- A. FALS
- B. TRUE
Answer: A
NEW QUESTION # 64
Which report provides a list of account stored in the vault.
- A. Entitlement Report
- B. Privileged Accounts Inventory
- C. Privileged Accounts Compliance Status
- D. Active Log
Answer: D
NEW QUESTION # 65
Platform settings are applied to______________.
- A. Individual Accounts
- B. Safes
- C. Network Areas
- D. The entire vault.
Answer: B
Explanation:
Explanation
Explanation/Reference: https://www.reddit.com/r/CyberARk/comments/avxnxz/safes_and_platform_association/
NEW QUESTION # 66
All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. Themembers of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group Operations Staff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of Operations Managers never need to be able to use the show, copy or connect buttons themselves.
Which safe permission do you need to grant Operations Staff? Check all that apply.
- A. Retrieve Accounts
- B. Use Accounts
- C. Access Safe without Authorization
- D. Authorize Password Requests
Answer: A
NEW QUESTION # 67
Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.
- A. TRUE
- B. FALSE
Answer: B
Explanation:
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/MESSAGES/Password
%20Vault%20Web%20Access%20Messages-%20General.htm
NEW QUESTION # 68
Which report provides a list of accounts stored in the vault.
- A. Entitlement Report
- B. Activity Log
- C. Privileged Accounts Inventory
- D. Privileged Accounts Compliance Status
Answer: C
Explanation:
Explanation/Reference: https://techinsight.com.vn/language/en/privileged-account-security-solution-part-2/
NEW QUESTION # 69
Match each component to its respective Log File location.
Answer:
Explanation:
Reference:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.4/en/Content/PTA/PTA-Data-Locations.htm
NEW QUESTION # 70
Which utilities could you use to change debugging levels on the vault without having to restart the vault.
Select all that apply.
- A. PrivateArk Server Central Administration
- B. Edit DBParm.ini in a text editor.
- C. PAR Agent
- D. Setup.exe
Answer: A,C
Explanation:
Explanation
PAR-Private Ark Remote Control Agent allows you to perform several Vault admin tasks (without restarting the Vault) and view machine statistics.
NEW QUESTION # 71
Which certificate type do you need to configure the vault for LDAP over SSL?
- A. a CA signed Certificate for the PVWA server
- B. the CA Certificate that signed the certificate used by the External Directory
- C. a self-signed Certificate for the Vault
- D. a CA signed Certificate for the Vault server
Answer: B
NEW QUESTION # 72
It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur
- A. TRUE
- B. FALS
Answer: A
Explanation:
Explanation
Password reconciliation can be restricted to specific days. This means that the CPM will only reconcile passwords on the days of the week specified in the RCExecutionDays parameter. The days of the week are represented by the first 3 letters of the name of the day. Sunday is represented by Sun, Mondayby Mon, etc.
NEW QUESTION # 73
Users can be restricted through certain CyberArk interfaces (e.g. PVWA or PACLI).
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION # 74
A logon account can be specified in the platform settings.
- A. True
- B. False
Answer: A
NEW QUESTION # 75
When a group is granted the 'Authorize Account Requests' permission on a safe Dual Control requests must be approved by
- A. That access cannot be granted to groups
- B. Any one person from that group
- C. The number of persons specified by the Master Policy
- D. Every person from that group
Answer: C
NEW QUESTION # 76
For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.
- A. On the safe in which the account is stored grant the group the 'Access safe without confirmation' authorization.
- B. On the safe in which the account is stored grant the group the 'Access safe without audit' authorization.
- C. Edit the master policy rule and modify the advanced 'Access safe without approval' rule to include the group.
- D. Create an exception to the Master Policy to exclude the group from the workflow process.
Answer: D
Explanation:
Explanation/Reference:
Reference: https://www.reddit.com/r/CyberARk/comments/6270zr/dual_control_on_specific_accounts/
NEW QUESTION # 77
When a DR Vault Server becomes an active vault, it will automatically fail back to the original state once the Primary Vault comes back online.
- A. True, if the AllowFailback setting is set to "yes" in the padr.ini file
- B. False; this is not possible
- C. True; this is the default behavior
- D. True, if the AllowFailback setting is set to "yes" in the dbparm.ini file
Answer: B
NEW QUESTION # 78
In accordance with best practice, SSH access is denied for root accounts on UNIXLINUX system.
What is the BEST way to allow CPM to manage root accounts?
- A. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account of the target server's root account.
- B. Configure the Unix system to allow SSH logins.
- C. Configure the CPM to allow SSH logins.
- D. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION # 79
......
The CyberArk Defender certification exam covers a wide range of topics including CyberArk architecture, implementation, administration, troubleshooting, and auditing. The exam is intended for professionals who are responsible for implementing and managing CyberArk solutions in their organizations. The exam is designed to test the knowledge, skills, and abilities of cybersecurity professionals in securing privileged access to critical assets, managing CyberArk components, and troubleshooting issues that may arise during implementation and operation.
The CyberArk Defender Certification Exam is a vendor-neutral certification that is recognized globally. The certification demonstrates that the holder has the skills and knowledge needed to implement and manage CyberArk solutions for privileged access management. This certification is a valuable asset for cybersecurity professionals looking to advance their careers and increase their earning potential.
Exam Dumps CAU201 Practice Free Latest CyberArk Practice Tests: https://www.prepawayexam.com/CyberArk/braindumps.CAU201.ete.file.html