2024 Easy Success CyberArk CAU201 Exam in First Try
Best CAU201 Exam Dumps for the Preparation of Latest Exam Questions
CyberArk CAU201 (CyberArk Defender) Certification Exam is designed for IT professionals who want to validate their skills and knowledge in managing privileged accounts and access credentials. CyberArk is a leading provider of security solutions that help organizations protect their critical assets from cyber threats. CyberArk Defender certification exam focuses on the CyberArk Privileged Access Security (PAS) solution, which provides a comprehensive platform for managing privileged accounts, securing application credentials, and controlling access to sensitive data.
CyberArk Defender certification exam (CAU201) is designed to test the knowledge and skills of IT professionals in securing privileged accounts and protecting sensitive data. Privileged accounts are accounts with elevated access privileges, which can be used to access, modify, or delete sensitive data, applications, or systems. CyberArk is a leading provider of privileged access management (PAM) solutions that help organizations secure their privileged accounts and prevent cyber attacks that target these accounts.
NEW QUESTION # 62
Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select
all that apply.
- A. Edit DBParm.ini in a text editor.
- B. Setup.exe
- C. PrivateArk Server Central Administration
- D. PAR Agent
Answer: D
NEW QUESTION # 63
What is the purpose of the Immediate Interval setting in a CPM policy?
- A. To control the maximum amount of time the CPM will wait for a password change to complete.
- B. To control how often the CPM looks for System Initiated CPM work.
- C. To control how often the CPM looks for User Initiated CPM work.
- D. To control how long the CPM rests between password changes.
Answer: D
NEW QUESTION # 64
Which report provides a list of account stored in the vault.
- A. Privileged Accounts Compliance Status
- B. Entitlement Report
- C. Privileged Accounts Inventory
- D. Active Log
Answer: C
NEW QUESTION # 65
As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION # 66
You are onboarding an account that is not supported out of the box.
What should you do first to obtain a platform to import?
- A. Search common community portals like stackoverflow, reddit, github for an existing platform.
- B. Visit the CyberArk marketplace and search for a platform that meets your needs.
- C. Create a service ticket in the customer portal explaining the requirements of the custom platform.
- D. From the platforms page, uncheck the "Hide non-supported platforms" checkbox and see if a platform meeting your needs appears.
Answer: C
NEW QUESTION # 67
If a password is changed manually on a server, bypassing the CPM, how would you configure the account so
that the CPM could resume management automatically?
- A. Configure the Provider to change the password to match the Vault's Password
- B. Associate a reconcile account and configure the platform to reconcile automatically.
- C. Run the correct auto detection process to rediscover the password.
- D. Associate a logon account and configure the platform to reconcile automatically.
Answer: B
NEW QUESTION # 68
You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to
[b]change [/b] the root account's password the CPM will.....
- A. None of these
- B. Log in to the system as the logon account, run the su command to log in as root, and then change root's password.
- C. Log in to the system as root, then change root's password
- D. Log in to the system as the logon account, then change roofs password
Answer: A
NEW QUESTION # 69
It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.
- A. TRUE
- B. FALS
Answer: B
NEW QUESTION # 70
According to the DEFAULT Web Options settings, which group grants access to the REPORTS page?
- A. Vault Admins
- B. Auditors
- C. PVWAUsers
- D. PVWAMonitor
Answer: D
Explanation:
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ ReportsInPVWA.htm
NEW QUESTION # 71
The primary purpose of exclusive accounts is to ensure non-repudiation (Individual accountability).
- A. TRUE
- B. FALS
Answer: A
NEW QUESTION # 72
As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.
- A. TRUE
- B. FALSE
Answer: B
Explanation:
Being in Vault admins group only give you access to safes which are created during installation (safe created in installation process ) -This is clearly mentioned in documents .
NEW QUESTION # 73
What is the name of the Platform parameters that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?
- A. Interval
- B. Min Validity Period
- C. Timeout
- D. Immediate Interval
Answer: A
NEW QUESTION # 74
Can the 'Connect' button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?
- A. Yes, if a logon account is associated with the root account.
- B. No, it is not possible.
- C. Yes, when using the connect button, CyberArk uses the PMTerminal.exe process which bypasses the root SSH restriction.
- D. Yes, only if a logon account is associated with the root account and the user connects through the PSM-SSH connection component.
Answer: D
NEW QUESTION # 75
By default, members of which built-in groups will be able to view and configure Automatic Remediation and
Session Analysis and Response in the PVWA?
- A. Vault Admins
- B. Auditors
- C. Security Admins
- D. Security Operators
Answer: C
Explanation:
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/Security-
Configuration.htm
NEW QUESTION # 76
PSM captures a record of each command that was executed in Unix.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION # 77
Users are unable to launch Web Type Connection components from the PSM server. Your manager asked you to open the case with CyberArk Support.
Which logs will help the CyberArk Support Team debug the issue? (Choose three.)
- A. <Session_ID>.Component.log
- B. PMconsole.log
- C. PSMConsole.log
- D. PSMTrace.log
- E. PSMDebug.log
- F. ITAlog.log
Answer: D,E,F
NEW QUESTION # 78
Which keys are required to be present in order to start the PrivateArk Server service?
- A. Safe key
- B. Recovery public key
- C. Recovery private key
- D. Server key
Answer: B,D
NEW QUESTION # 79
Time of day or day of week restrictions on when password verifications can occur configured in
____________________.
- A. The Safe settings
- B. The Master Policy
- C. The Account Details
- D. The Platform settings
Answer: D
Explanation:
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Verifying-
Passwords.htm
NEW QUESTION # 80
A Reconcile Account can be specified in the Master Policy.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION # 81
All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the
accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and
connect buttons on those passwords at any time without confirmation. The members of the AD group
OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an
emergency basis, but only with the approval of a member of OperationsManagers. The members of
OperationsManagers never need to be able to use the show, copy or connect buttons themselves.
Which safe permissions do you need to grant to OperationsStaff? Check all that apply.
- A. List Accounts
- B. Access Safe without Authorization
- C. Retrieve Accounts
- D. Use Accounts
- E. Authorize Password Requests
Answer: D
Explanation:
Explanation/Reference:
NEW QUESTION # 82
CyberArk implements license limits by controlling the number and types of users that can be provisioned in the
vault.
- A. FALSE
- B. TRUE
Answer: B
Explanation:
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the-
CyberArk-License.htm
NEW QUESTION # 83
In accordance with best practice, SSH access is denied for root accounts on UNIXLINUX system.
What is the BEST way to allow CPM to manage root accounts?
- A. Configure the CPM to allow SSH logins.
- B. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account of the target server's root account.
- C. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.
- D. Configure the Unix system to allow SSH logins.
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION # 84
When managing SSH keys, the CPM stores the Public Key
- A. On the target server
- B. Nowhere because the public key can always be generated from the private key.
- C. A & B
- D. In the Vault
Answer: A
Explanation:
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Managing%
20SSH%20Keys.htm
NEW QUESTION # 85
You are logging into CyberArk as the Master user to recover an orphaned safe.
Which items are required to log in as Master?
- A. Operator CD, Master Password, console access to the Vault server, Recover.exe
- B. Operator CD, Master Password, console access to the PVWA server, PVWA access
- C. Master CD, Master Password, console access to the PVWA server, Recover.exe
- D. Master CD, Master Password, console access to the Vault server, Private Ark Client
Answer: D
NEW QUESTION # 86
......
Understanding functional and technical aspects of CyberArk Account Onboarding
The following will be discussed in the CAU-201 exam dumps pdf:
- Describe tools that could be used to monitor CyberArk Application Health
- Onboard an account from the pending accounts list
- Onboard SSH Keys with Account Uploader Application Management
- Manually onboard an account
- Maintain an appropriate chain of custody for Encryption Keys
- Use PrivateArk with Proficiency
- Perform a bulk upload of accounts using Password Upload Utility or REST
CAU201 Study Material, Preparation Guide and PDF Download: https://www.dumpsfree.com/CAU201-valid-exam.html
CAU201 Actual Questions 100% Same Braindumps with Actual Exam: https://drive.google.com/open?id=14z8gU3xWMiJEpFc5TaJwvye948JImnnN