CAU302 Online Practice Questions and Answers

All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of OperationsManagers. The members of OperationsManagers never need to be able to use the show, copy or connect buttons themselves.

Which safe permissions do you need to grant to OperationsManagers? (Choose all that apply.)

A. Use Accounts

B. Retrieve Accounts

C. List Accounts

D. Authorize Password Requests

E. Access Safe without Authorization

Which credentials does CyberArk use when managing a target account?

A. Those of the service account for the CyberArk Password Manager serviceD18912E1457D5D1DDCBD40AB3BF70D5D

B. A Domain Administrator account created for this purpose

C. The credentials of the target account

D. An account assigned by the Master Policy

The Vault supports multiple instances of the following components Choose all that Apply.

A. PVWA

B. CPM

C. PSM

D. AIM Provider

If a transparent user belongs two different directory mappings, how does the system determine, which user template to use?

A. The system will use the template for the mapping listed first.

B. The system will use the template for the mapping listed last.

C. The system will grant all of the vault authorizations from the two templates.

D. The system will grant only the vault authorizations that are listed in both templates.

Which type of automatic remediation can be performed by the PTA in case of a Suspecious Password Change security event?

A. Password Change

B. Password Reconcilation

C. Session Suspension

D. Session Terminiation

What are the chief benefits of PSM? Choose all that apply?

A. Privileged Session Isolation

B. Automatic Password Management

C. Privileged Session Recording

D. A and C

In order to connect to a target device through PSM. the account credentials used for the connection must be stored in the vault?

A. True

B. False. Because the user can also enter credentials manually using Secure Connect

C. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSMConnect.

D. False Because if credentials are not stored in the vault, the PSM will prompt for credentials

A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

A. True

B. False

CyberArk Logical Container.

A. CPMLOG

B. CPM_errorlog

C. pmlog

D. pm errors log

CyberArk creates exceptions for Data Execution Prevention (DEP) on selected executable files. This is done as part of installing, which of the following components?

A. PSM

B. CPM

C. PVWA

D. AAM Credential Provider (previously known as AIM Credential Provider)