Updated Jul-2022 Test Engine to Practice CAU201 Test Questions [Q66-Q80] – IT Certification Exam Questions & Answers

5/5 - (2 votes)

Updated Jul-2022 Test Engine to Practice CAU201 Test Questions

CAU201 Real Exam Questions Test Engine Dumps Training With 179 Questions

Certification Path

Valid Trustee Certification is prerequisite for this exam. Completion will give CyberArk Defender status.

How to book the CAU201 Exam

These are following steps for registering the CyberArk CAU201 exam.

Step 1: Visit to Pearson VUE Exam Registration
Step 2: Signup/Login to Pearson VUE account
Step 3: Search for CyberArk CAU201 Exam Certifications Exam
Step 4: Select Date, time and confirm with payment method

NEW QUESTION 66
Users can be resulted to using certain CyberArk interfaces (e.g.PVWA or PACLI).

TRUE

FALS

NEW QUESTION 67
Which permissions are needed for the Active Directory user required by the Windows Discovery process?

Domain Admin

LDAP Admin

Read/Write

Read

NEW QUESTION 68
If a user is a member of more than one group that has authorizations on a safe, by default that user is
granted____________________.

the vault will not allow this situation to occur.

only those permissions that exist on the group added to the safe first.

only those permissions that exist in all groups to which the user belongs.

the cumulative permissions of all the groups to which that user belongs.

NEW QUESTION 69
All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of OperationsManagers. The members of OperationsManagers never need to be able to use the show, copy or connect buttons themselves.
Which safe permissions do you need to grant to OperationsStaff? Check all that apply.

Use Accounts

Retrieve Accounts

List Accounts

Authorize Password Requests

Access Safe without Authorization

Explanation/Reference:

NEW QUESTION 70
Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

Discovery and Audit (DMA)

Auto Detection (AD)

Export Vault Data (EVD)

On Demand Privileges Manager (OPM)

Accounts Discovery

NEW QUESTION 71
What is the purpose of the Immediate Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how often the CPM rests between password changes.

To Control the maximum amount of time the CPM will wait for a password change to complete.

Explanation
When the Master Policy enforces check-in/check-out exclusive access, passwords are changed when the user clicks the Release button and releases the account. This is based on the ImmediateInterval parameter in the applied platform. If the user forgets to release the account, it is automatically released and changed by the CPM after a predetermined number of minutes, defined in the MinValidityPeriod parameter specified in the platform

NEW QUESTION 72
Which option in the Private Ark client is used to update users’ Vault group memberships?

Update > General tab

Update > Authorizations tab

Update > Member Of tab

Update > Group tab

NEW QUESTION 73
The vault supports Subnet Based Access Control.

TRUE

FALSE

NEW QUESTION 74
Which CyberArk group does a user need to be part of to view recordings or live monitor sessions?

Auditors

Vault Admin

DR Users

Operators

NEW QUESTION 75
You need to enable the PSM for all platforms.
Where do you perform this task?

Platform Management > (Platform) > UI & Workflows

Master Policy > Session Management

Master Policy > Privileged Access Workflows

Administration > Options > Connection Components

NEW QUESTION 76
Which of the following components can be used to create a tape backup of the Vault?

Disaster Recovery

Distributed Vaults

Replicate

High Availability

NEW QUESTION 77
When on-boarding account using Accounts Feed, Which of the following is true?

You must specify an existing Safe where are account will bestored when it is on boarded to the Vault

You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.

You can specify the name of a new Platform that will be created and associatedwith the account

Any account that is on boarded can be automatically reconciled regardless of the platform it is associated with.

NEW QUESTION 78
You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.
How should this be configured to allow for password management using least privilege?

Configure each CPM to use the correct logon account.

Configure each CPM to use the correct reconcile account.

Configure the UNIX platform to use the correct logon account.

Configure the UNIX platform to use the correct reconcile account.

NEW QUESTION 79
PSM for Windows (previously known as “RDP Proxy”) supports connections to the following target systems

Windows

UNIX

Oracle

All of the above

NEW QUESTION 80
The Password upload utility can be used to create safes.

TRUE

FALSE