CAU201 Exam Training Practice Tests (CyberArk Defender)]

Question 1

Which user(s) can access all passwords in the Vault?

A. Any member of auditors B. Master C. Administrator D. Any member of Vault administrators

Correct Answer: B

Question 2

CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

A. FALSE B. TRUE

Correct Answer: B

Question 3

You have been asked to turn off the time access restrictions for a safe.
Where is this setting found?

A. Password Vault Web Access (PVWA) B. Vault C. PrivateArk D. RestAPI

Correct Answer: C

Question 4

The Vault administrator can change the Vault license by uploading the new license to the system Safe.

A. True B. False

Correct Answer: A

Question 5

For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

Correct Answer:

Question 6

To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?

A. Use Accounts B. List Accounts, Use Accounts, Retrieve Accounts C. List Accounts, Use Accounts D. List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation

Correct Answer: A

Question 7

Which permissions are needed for the Active Directory user required by the Windows Discovery process?

A. Read B. LDAP Admin C. Domain Admin D. Read/Write

Correct Answer: A

Question 8

It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur

A. FALSE B. TRUE

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

What is the purpose of the Interval setting in a CPM policy?

A. To control how long the CPM rests between password changes. B. To control how often the CPM looks for User Initiated CPM work. C. To control how often the CPM looks for System Initiated CPM work. D. To control the maximum amount of time the CPM will wait for a password change to complete.

Correct Answer: C

Question 10

Customers who have the 'Access Safe without confirmation' safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

A. FALSE B. TRUE

Correct Answer: A

Question 11

A Vault administrator have associated a logon account to one of their Unix root accounts in the vault. When attempting to verify the root account's password the Central Policy Manager (CPM) will:

A. ignore the logon account and attempt to log in as root B. prompt the end user with a dialog box asking for the login account to use C. none of these D. log in first with the logon account, then run the SU command to log in as root using the password in the Vault

Correct Answer: B

Question 12

Arrange the steps to restore a Vault using PARestore for a Backup in the correct sequence.

Correct Answer:

Question 13

When managing SSH keys, the CPM stored the Private Key

A. On the target server B. In the Vault C. A & B D. Nowhere because the private key can always be generated from the public key.

Correct Answer: B

Question 14

Which Automatic Remediation is configurable for a PTA detection of a "Suspected Credential Theft"?

A. Rotate Credentials B. Reconcile Credentials C. Add to Pending D. Disable Account

Correct Answer: B

CyberArk Defender - CAU201 Exam Practice Test