CAU301 Exam Training Practice Tests (CyberArk Sentry)]

Question 1

Does CyberArk need service accounts on each server to change passwords?

A. Yes. it requires a domain administrator account to change any password on any server. B. No. passwords are changed by the Password Provider Agent. C. No. the CPM uses the account information stored in the vault to login and change the account's password using its own credentials D. Yes. it requires a local administrator account on any Windows server and a root level account on any Unix server.

Correct Answer: D

Question 2

If a transparent user matches two different directory mappings, how does the system determine which user template to use?

A. The system will grant only the vault authorizations that are listed in both templates B. The system will use the template for the mapping listed first. C. The system will grant all of the vault authorizations from the two templates. D. The system will use the template for the mapping listed last.

Correct Answer: C

Question 3

Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?

A. ENEConf.ini B. padr.ini C. dbparm.ini D. PARagent.ini

Correct Answer: C

Question 4

What would be a good use case for the Disaster Recovery module?

A. Off site replication is required. B. PSM is used. C. Recovery Time Objectives or Recovery Point Objectives are at or near zero. D. Integration with an Enterprise Backup Solution is required.

Correct Answer: C

CyberArk Sentry - CAU301 Exam Practice Test