Authentic Best resources for CAU302 Test Engine Practice Exam
[2021] CAU302 PDF Questions - Perfect Prospect To Go With TestKingsIT Practice Exam
NEW QUESTION 84
An auditor initiates a LIVE monitoring session to PSM server to view an ongoing LIVE session. When the auditor's machine makes an RDP connection the PSM server, which user will be used?
- A. Shadowuser
- B. PSMConnect
- C. Credentials Stored in the Vault for the Target Machine
- D. PSMAdminConnect
Answer: D
NEW QUESTION 85
What is the purpose of the PrivateArk Database service?
- A. Executes password changes.
- B. Maintains Vault metadata.
- C. Communicates with components.
- D. Sends email alerts from the vault.
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION 86
You haveassociated a logon account to one of your UNIX root accounts in the vault When attempting to verify the root account's password the CPM will...
- A. Prompt the end user with a dialog box asking for the login account to use.
- B. None of these.
- C. Log in first with the logon account, then run the su command to log in as root using the password in the vault
- D. Ignore the logon account and attempt to log in as root.
Answer: D
NEW QUESTION 87
What is the primary purpose of Dual Control?
- A. Reduced risk of credential theft
- B. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization
- C. More frequent password changes
- D. Non-repudiation (individual accountability)
Answer: B
NEW QUESTION 88
Time of day of week restrictions on when password changes can occur are configured in ________________.
- A. The Platform settings
- B. The Master Policy
- C. The Safe settings
- D. The Account Details
Answer: A
NEW QUESTION 89
What are the functions of the Remote Control Agent service? (Choose all that apply.)
- A. Allows CyberArk Services to be managed (start/stop/status) remotely
- B. Allows remote monitoring of the Vault
- C. Maintains audit data
- D. Sends SNMP traps from the Vault
Answer: A,B,D
NEW QUESTION 90
When a DR vault server becomes an active vault, it will automatically fail bacK to the original state once the primary vault comes back online.
- A. True, this is the default behavior
- B. True, if the 'AllowFailback' setting is set to yes in the dbparm ini file.
- C. True, if the 'AllowFailback' setting is set to yes in the PADR.ini file.
- D. False, this is not possible
Answer: C
NEW QUESTION 91
Using the SSH Key Manager it is possible to allow CPM to manage SSH Keys similarly to passwords.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION 92
Match the log file name with the CyberArk Component that generates the log.
Answer:
Explanation:
NEW QUESTION 93
The Vault Internal safe contains the configuration for an LDAP integration.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 94
Which report could show all accounts that are past their expiration dates?
- A. Privileged Account Compliance Status report
- B. Applications Inventory report
- C. Privileged Account Inventory report
- D. Activity log
Answer: A
NEW QUESTION 95
A Simple Network Management Protocol (SNMP) integration allows the Vault administrator to forward ITALOG records to a monitoring solution.
- A. False
- B. True
Answer: A
NEW QUESTION 96
It is impossible to override Mater Policy settings for a Platform
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 97
During LDAP/S integration you should specify the Fully Qualified Domain Name (FQDN) of the Domain Controller
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION 98
Which type of automatic remediation can be performed by the PTA in case of a suspicious password change security event?
- A. Password change
- B. Session suspension
- C. Session termination
- D. Password reconciliation
Answer: D
Explanation:
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/Security- Configuration.htm
NEW QUESTION 99
A SIEM integration allows you to forward audit records to a monitoring solution.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION 100
Which of the following sends out Simple Network Management Protocol (SNMP) traps?
- A. CyberArk Event Notification Engine
- B. CyberArk SNMP agent
- C. PrivateArk Remote Control Agent
- D. PrivateArk Server
Answer: C
NEW QUESTION 101
Which is the purpose of the HeadStartInterval setting in a platform?
- A. It instructs the AIM provider to 'skip the cache' during the defined time period.
- B. It alerts users of upcoming password changes a certain number of days before expiration.
- C. It instructs the CPM to initiate the password change process certain number of days before expiration.
- D. It determines how far in advance audit data is collected for reports.
Answer: C
Explanation:
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PrivCloud/Latest/en/Content/PASREF/ Automatic%20Password%20Management%20-%20Password%20Change.htm
NEW QUESTION 102
Two-factor authentication can be implemented by integrating the Vault with a RADIUS server configured to require PIN and token.
- A. True
- B. False
Answer: A
NEW QUESTION 103
Which user(s) can access all passwords in the vault
- A. Any member of Auditors
- B. Administrator
- C. Master
- D. Any member of Vault Admins
Answer: C
NEW QUESTION 104
What is the PRIMARY reason for installing more than 1 active Central Policy Manager (CPM)?
- A. Having additional CPMs increases the maximum number of devices CyberArk can manage.
- B. Multiple instances create fault tolerance.
- C. Installing CPMs in multiple sites prevents complex firewall rules to manage devices at remote sites.
- D. Multiple instances increase response time.
Answer: A
NEW QUESTION 105
PSM for SSH (previously known as "PSM SSH Proxy") supports connections to the following target systems:
- A. Oracle
- B. UNIX
- C. All of the above
- D. Windows
Answer: D
NEW QUESTION 106
Which service is optional on the Vault?
- A. CyberArk Hardened Windows Firewall
- B. PrivateArk Remote Control Agent
- C. PrivateArk Server
- D. PrivateArk Database
Answer: B
NEW QUESTION 107
......
Best updated resource for CAU302 Online Practice Exam: https://www.testkingit.com/CyberArk/latest-CAU302-exam-dumps.html