CAU201 CyberArk Defender Free Dumps Questions

dumps2021-12-21T01:03:39+08:00

CyberArk Defender CAU201 exam dumps questions are available online. Passing CAU201 exam is easy for you by studying all of CAU201 dumps questions. In real CyberArk certification CAU201 exam, there are 60 multiple-choice items. Each candidate has 90 minutes to finish all the questions. The required passing score of CAU201 exam is 70%. Free CyberArk Defender CAU201 exam dumps questions are available below.

Page 1 of 6

1. Which CyberArk utility allows you to create lists of Master Policy Settings, owners and safes for output to text files or MSSQL databases?

Export Vault Data

Export Vault Information

PrivateArk Client

Privileged Threat Analytics

2. Which combination of Safe member permissions will allow end users to log in to a remote machine transparently but NOT show or copy the password?

Use Accounts, Retrieve Accounts, List Accounts

Use Accounts, List Accounts

Use Accounts

List Accounts, Retrieve Accounts

3. Which is the primary purpose of exclusive accounts?

Reduced risk of credential theft

More frequent password changes

Non-repudiation (individual accountability)

To force a ‘collusion to commit’ fraud ensuring no single actor may use a password without authorization

4. A newly created platform allows users to access a Linux endpoint. When users click to connect, nothing happens.

Which piece of the platform is missing?

PSM-SSH Connection Component

UnixPrompts.ini

UnixProcess.ini

PSM-RDP Connection Component

5. What is the purpose of the Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how long the CPM rests between password changes.

To control the maximum amount of time the CPM will wait for a password change to complete.

6. Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile Utility? (Choose three.)

Operating System Username

Host IP Address

Client Hostname

Operating System Type (Linux/Windows/HP-UX)

Vault IP Address

Time Frame

7. Which CyberArk group does a user need to be part of to view recordings or live monitor sessions?

Auditors

Vault Admin

DR Users

Operators

8. The System safe allows access to the Vault configuration files.

TRUE

FALS

9. PSM captures a record of each command that was executed in Unix.

TRIE

FALSE

10. A user is receiving the error message “ITATS006E Station is suspended for User jsmith” when attempting to sign into the Password Vault Web Access (PVWA) .

Which utility would a Vault administrator use to correct this problem?

createcredfile.exe

cavaultmanager.exe

PrivateArk

PVWA

Page 2 of 6

11. You are creating a Dual Control workflow for a team’s safe.

Which safe permissions must you grant to the Approvers group?

List accounts, Authorize account request

Retrieve accounts, Access Safe without confirmation

Retrieve accounts, Authorize account request

List accounts, Unlock accounts

12. Which user(s) can access all passwords in the Vault?

Administrator

Any member of Vault administrators

Any member of auditors

Master

13. What is the purpose of the password change process?

To test that CyberArk is storing accurate credentials for accounts

To change the password of an account according to organizationally defined password rules

To allow CyberArk to manage unknown or lost credentials

To generate a new complex password

14. Which permissions are needed for the Active Directory user required by the Windows Discovery process?

Domain Admin

LDAP Admin

Read/Write

Read

15. The vault supports Role Based Access Control.

TRUE

FALSE

16. Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed.

HeadStartInterval

Interval

ImmediateInterval

The CPM does not change the password under this circumstance

17. Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?

Suspected credential theft

Over-Pass-The-Hash

Golden Ticket

Unmanaged privileged access

18. Due to network activity, ACME Corp’s PrivateArk Server became active on the OR Vault while the Primary Vault was also running normally. All the components continued to point to the Primary Vault.

Which steps should you perform to restore DR replication to normal?

Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

Shutdown PrivateArk Server on Primary Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

Shutdown PrivateArk Server on DR Vault > Replicate data from DR Vault to Primary Vault > Shutdown PrivateArk Server on DR Vault > Start replication on DR vault

19. What is the purpose of a linked account?

To ensure that a particular collection of accounts all have the same password.

To ensure a particular set of accounts all change at the same time.

To connect the CPNI to a target system.

To allow more than one account to work together as part of a password management process.

20. Your organization has a requirement to allow users to “check out passwords” and connect to targets with the same account through the PSM.

What needs to be configured in the Master policy to ensure this will happen?

Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active

Enforce check-in/check-out exclusive access = inactive; Require privileged session monitoring and isolation = inactive

Enforce check-in/check-out exclusive access = inactive; Record and save session activity = active

Enforce check-in/check-out exclusive access = active; Record and save session activity = inactive

Page 3 of 6

21. You have been asked to secure a set of shared accounts in CyberArk whose passwords will need to be used by end users. The account owner wants to be able to track who was using an account at any given moment.

Which security configuration should you recommend?

Configure one-time passwords for the appropriate platform in Master Policy.

Configure shared account mode on the appropriate safe.

Configure both one-time passwords and exclusive access for the appropriate platform in Master Policy.

Configure object level access control on the appropriate safe.

22. What is the purpose of the PrivateArk Server service?

Executes password changes

Maintains Vault metadata

Makes Vault data accessible to components

Sends email alerts from the Vault

23. What is the primary purpose of Dual Control?

Reduced risk of credential theft

More frequent password changes

Non-repudiation (individual accountability)

To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.

24. If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

Configure the Provider to change the password to match the Vault’s Password

Associate a reconcile account and configure the platform to reconcile automatically

Associate a logon account and configure the platform to reconcile automatically

Run the correct auto detection process to rediscover the password

25. Users are unable to launch Web Type Connection components from the PSM server. Your manager asked you to open the case with CyberArk Support.

Which logs will help the CyberArk Support Team debug the issue? (Choose three.)

PSMConsole.log

PSMDebug.log

PSMTrace.log

<Session_ID>.Component.log

PMconsole.log

ITAlog.log

26. PSM for Windows (previously known as “RDP Proxy”) supports connections to the following target systems

Windows

UNIX

Oracle

All of the above

27. What is the name of the Platform parameters that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

Min Validity Period

Interval

Immediate Interval

Timeout

28. A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request.

What is the correct location to identify users or groups who can approve?

PVWA> Administration > Platform Configuration > Edit Platform > UI & Workflow > Dual Control> Approvers

PVWA> Policies > Access Control (Safes) > Safe Members > Workflow > Authorize Password Requests

PVWA> Account List > Edit > Show Advanced Settings > Dual Control > Direct Managers

PrivateArk > Admin Tools > Users and Groups > Auditors (Group Membership)

29. Which report provides a list of account stored in the vault.

Privileged Accounts Inventory

Privileged Accounts Compliance Status

Entitlement Report

Active Log

30. When creating an onboarding rule, it will be executed upon .

All accounts in the pending accounts list

Any future accounts discovered by a discovery process

Both “All accounts in the pending accounts list” and “Any future accounts discovered by a discovery process”

Page 4 of 6

31. A user with administrative privileges to the vault can only grant other users privileges that he himself has.

TRUE

FALSE

32. By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

Vault Admins

Security Admins

Security Operators

Auditors

33. You want to generate a license capacity report.

Which tool accomplishes this?

Password Vault Web Access

PrivateArk Client

DiagnoseDB Report

RestAPI

34. It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur

TRUE

FALSE

35. Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.

PACli.ini

Vault.ini

conf.ini

A comma delimited upload file

36. The Vault administrator can change the Vault license by uploading the new license to the system Safe.

True

False

37. A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

True

False

38. You are creating a shared safe for the help desk.

What must be considered regarding the naming convention?

Ensure your naming convention is no longer than 20 characters.

Combine environments, owners and platforms to minimize the total number of safes created.

Safe owners should determine the safe name to enable them to easily remember it.

The use of these characters V:*<>".| is not allowed.

39. Which option in the Private Ark client is used to update users’ Vault group memberships?

Update > General tab

Update > Authorizations tab

Update > Member Of tab

Update > Group tab

40. You are logging into CyberArk as the Master user to recover an orphaned safe.

Which items are required to log in as Master?

Master CD, Master Password, console access to the Vault server, Private Ark Client

Operator CD, Master Password, console access to the PVWA server, PVWA access

Operator CD, Master Password, console access to the Vault server, Recover.exe

Master CD, Master Password, console access to the PVWA server, Recover.exe

Page 5 of 6

41. 1.A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings.

What is the issue?

The user must login as PSMAdminConnect

The PSM service is not running

The user is not a member of the PVWAMonitor group

The user is not a member of the Auditors group

42. What is the maximum number of levels of authorization you can set up in Dual Control?

43. Which of the Following can be configured in the Master Poky? Choose all that apply.

Dual Control

One Time Passwords

Exclusive Passwords

Password Reconciliation

Ticketing Integration

Required Properties

Custom Connection Components

Password Aging Rules

44. In PVWA, you are attempting to play a recording made of a session by user jsmith, but there is no option to “Fast Forward” within the video. It plays and only allows you to skip between commands instead. You are also unable to download the video.

What could be the cause?

Recording is of a PSM for SSH session.

The browser you are using is out of date and needs an update to be supported.

You do not have the “View Audit” permission on the safe where the account is stored.

You need to update the recorder settings in the platform to enable screen capture every 10000 ms or less.

45. In the Private Ark client, how do you add an LDAP group to a CyberArk group?

Select Update on the CyberArk group, and then click Add > LDAP Group

Select Update on the LDAP Group, and then click Add > LDAP Group

Select Member Of on the CyberArk group, and then click Add > LDAP Group

Select Member Of on the LDAP group, and then click Add > LDAP Group

46. What is the purpose of the HeadStartlnterval setting m a platform?

It determines how far in advance audit data is collected tor reports

It instructs the CPM to initiate the password change process X number of days before expiration.

It instructs the AIM Provider to ‘skip the cache' during the defined time period

It alerts users of upcoming password changes x number of days before expiration.

47. Which keys are required to be present in order to start the PrivateArk Server service?

Recovery public key

Recovery private key

Server key

Safe key

48. You receive this error: “Error in changepass to user domainuser on domain server(domain. (winRc=5) Access is denied.”

Which root cause should you investigate?

The account does not have sufficient permissions to change its own password.

The domain controller is unreachable.

The password has been changed recently and minimum password age is preventing the change.

The CPM service is disabled and will need to be restarted.

49. Within the Vault each password is encrypted by:

the server key

the recovery public key

the recovery private key

its own unique key

50. When managing SSH keys, the CPM stored the Private Key

In the Vault

On the target server

A & B

Nowhere because the private key can always be generated from the public key.

Page 6 of 6

51. CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

TRUE

FALSE

52. What is the purpose of the PrivateArk Database service?

Communicates with components

Sends email alerts from the Vault

Executes password changes

Maintains Vault metadata

53. Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

Require dual control password access Approval

Enforce check-in/check-out exclusive access

Enforce one-time password access

Enforce check-in/check-out exclusive access & Enforce one-time password access

54. Your organization requires all passwords be rotated every 90 days.

Where can you set this regulatory requirement?

Master Policy

Safe Templates

PVWAConfig.xml

Platform Configuration

CAU201 CyberArk Defender Free Dumps Questions

CAU201 CyberArk Defender Free Dumps Questions

Share this post

Leave a Reply Cancel reply

Related Posts