Latest CAU201 Actual Free Exam Questions Updated 114 Questions
Free CAU201 Exam Braindumps certification guide Q&A
Who should take the CAU201 exam
Defender Exam is intended to certify an examineeâs competence to fill one of the following roles within a Privileged Account Security Program:
- Data Administrator. The Data Administrator is responsible for provisioning safes and platforms, and for onboarding accounts.
- Application Support. The Application Support Engineer provides first level support of the CyberArk applications within the customer organization.
- Vault Administrator. The Vault Administrator is responsible for application administration and maintaining an operable PAS environment.
NEW QUESTION 10
Customers who have the 'Access Safe without confirmation' safe permission on a safe where accounts are
configured for Dual control, still need to request approval to use the account.
- A. TRUE
- B. FALSE
Answer: B
NEW QUESTION 11
What is the name of the Platform parameter that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?
- A. ImmediateInterval
- B. MinValidityPeriod
- C. Interval
- D. Timeout
Answer: D
NEW QUESTION 12
Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.
- A. PACli.ini
- B. conf.ini
- C. Vault.ini
- D. A comma delimited upload file
Answer: B,C,D
NEW QUESTION 13
The Accounts Feed contains:
- A. All users added to CyberArk in the last 30 days
- B. All accounts added to the vault in the last 30 days
- C. Accounts that were discovered by CyberArk in the last 30 days
- D. Accounts that were discovered by CyberArk that have not yet been onboarded
Answer: C
NEW QUESTION 14
The vault supports Subnet Based Access Control.
- A. TRUE
- B. FALSE
Answer: A
NEW QUESTION 15
Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.
- A. ImmediateInterval
- B. HeadStartInterval
- C. Interval
- D. The CPM does not change the password under this circumstance
Answer: C
NEW QUESTION 16
PSM for Windows (previously known as "RDP Proxy") supports connections to the following target systems
- A. All of the above
- B. Windows
- C. UNIX
- D. Oracle
Answer: B
NEW QUESTION 17
Which of the Following can be configured in the Master Poky? Choose all that apply.
- A. Ticketing Integration
- B. Password Reconciliation
- C. Required Properties
- D. One Time Passwords
- E. Dual Control
- F. Custom Connection Components
- G. Exclusive Passwords
- H. Password Aging Rules
Answer: B,C,G,H
NEW QUESTION 18
When on-boarding account using Accounts Feed, which of the following is true?
- A. You can specify the name of a new safe that will be created where the account will be stored when it is on- boarded to the Vault.
- B. You must specify an existing Safe where the account will be stored when it is on-boarded to the Vault.
- C. You can specify the name of a new Platform that will be created and associated with the account.
- D. Any account that is on-boarded can be automatically reconciled regardless of the platform it is associated with.
Answer: C
Explanation:
Explanation/Reference: https://www.cyberark.com/resource/automating-privileged-account-onboarding/
NEW QUESTION 19
It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur
- A. TRUE
- B. FALS
Answer: A
Explanation:
Password reconciliation can be restricted to specific days. This means that the CPM will only reconcile passwords on the days of the week specified in the RCExecutionDays parameter. The days of the week are represented by the first 3 letters of the name of the day. Sunday is represented by Sun, Mondayby Mon, etc.
NEW QUESTION 20
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)
- A. Store the CD in a physical safe and mount the CD every time Vault maintenance is performed
- B. Store the server key in a Hardware Security Module (HSM) and copy the rest the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions
- C. Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions
- D. Copy the entire contents of the CD to the system Safe on the Vault
Answer: A,B,C
NEW QUESTION 21
The Vault administrator can change the Vault license by uploading the new license to the system Safe.
- A. True
- B. False
Answer: A
NEW QUESTION 22
According to the DEFAULT Web Options settings, which group grants access to the REPORTS page?
- A. PVWAUsers
- B. PVWAMonitor
- C. Vault Admins
- D. Auditors
Answer: B
NEW QUESTION 23
What is the purpose of the PrivateArk Server service?
- A. Maintains Vault metadata
- B. Makes Vault data accessible to components
- C. Executes password changes
- D. Sends email alerts from the Vault
Answer: B
NEW QUESTION 24
If a user is a member of more than one group that has authorizations on a safe, by default that user is
granted____________________.
- A. the cumulative permissions of all the groups to which that user belongs.
- B. the vault will not allow this situation to occur.
- C. only those permissions that exist in all groups to which the user belongs.
- D. only those permissions that exist on the group added to the safe first.
Answer: D
NEW QUESTION 25
Ifa password is changed manually on a server, bypassing the CPM, how would you configure theaccount so that the CPM could resume management automatically?
- A. Configure the Provider to change the password to match the Vault's Password
- B. Associate a logonaccount and configure the platform to reconcile automatically
- C. Run the correct auto detection process to rediscover the password
- D. Associate a reconcile account and configure the platform to reconcile automatically
Answer: D
NEW QUESTION 26
What is the purpose of the HeadStartlnterval setting m a platform?
- A. It instructs the CPM to initiate the password change process X number of days before expiration.
- B. It alerts users of upcoming password changes x number of days before expiration.
- C. It instructs the AIM Provider to 'skip the cache' during the defined time period
- D. It determines how far in advance audit data is collected tor reports
Answer: A
Explanation:
Explanation
The number of days before the password expires (according to the ExpirationPeriod parameter) that the CPM will initiate a password change process. This parameter is not relevant if the policy will be applied to a member of an account group.
NEW QUESTION 27
You have associated a logon account to one of your UNIX root accounts in the vault. When attempting to
change the root account's password the CPM will...
- A. Log in to the system as the logon account, run the su command to log in as root, and then change root's
password. - B. None of these.
- C. Log in to the system as root, then change root's password.
- D. Log in to the system as the logon account, then change root's password
Answer: C
NEW QUESTION 28
Time of day or day of week restrictions on when password verifications can occur configured in ____________________.
- A. The Master Policy
- B. The Platform settings
- C. The Safe settings
- D. The Account Details
Answer: B
NEW QUESTION 29
......
CAU201 Certification Overview Latest CAU201 PDF Dumps: https://www.dumpsfree.com/CAU201-valid-exam.html
Top CyberArk CAU201 Exam Audio Study Guide! Practice Questions Edition: https://drive.google.com/open?id=1JfQdU01zgcipjnY0lCN6gFfGmB0GPCdj