Home > CAU201 / CyberArk

(Aug-2022) CAU201 Exam Dumps Contains FREE Real Quesions from the Actual Exam [Q86-Q108]

Published date August 5, 2022

Author admin

Comments: 0

Rate this post

(Aug-2022) CAU201 Exam Dumps Contains FREE Real Quesions from the Actual Exam

Free Test Engine Verified By CyberArk Defender Certified Experts

For more info visit:

CyberArk CAU201 Exam Reference

NEW QUESTION 86
Match the log file name with the CyberArk Component that generates the log.

NEW QUESTION 87
Accounts Discovery allows secure connections to domain controllers.

TRUE

FALSE

NEW QUESTION 88
When on-boarding account using Accounts Feed, Which of the following is true?

You must specify an existing Safe where are account will be stored whenitis on boarded to the Vault

You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.

You can specify the name of a new Platform that will be created and associated with the account

Any account that is on boarded can beautomaticallyreconciled regardless ofthe platformit isassociated with.

NEW QUESTION 89
Which of the following Privileged Session Management (PSM) solutions support live monitoring of active sessions?

PSM (i.e., launching connections by clicking on the connect button in the Password Vault Web Access (PVWA)

PSM for Windows (previously known as RDP Proxy)

PSM for SSH (previously known as PSM-SSH Proxy)

All of the above

NEW QUESTION 90
Platform settings are applied to _________.

The entire vault.

Network Areas

Safes

Individual Accounts

NEW QUESTION 91
Which statement is correct concerning accounts that are discovered, but cannot be added to the Vault by an automated onboarding rule?

They are added to the Pending Accounts list and can be reviewed and manually uploaded.

They cannot be onboarded to the Password Vault.

They must be uploaded using third party tools.

They are not part of the Discovery Process.

NEW QUESTION 92
The password upload utility must run from the CPM server

TRUE

FALSE

Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Password-
Upload-Utility.htm

NEW QUESTION 93
Users are unable to launch Web Type Connection components from the PSM server. Your manager asked you to open the case with CyberArk Support.
Which logs will help the CyberArk Support Team debug the issue? (Choose three.)

PSMConsole.log

PSMDebug.log

PSMTrace.log

<Session_ID>.Component.log

PMconsole.log

ITAlog.log

NEW QUESTION 94
Your organization requires all passwords be rotated every 90 days.
Where can you set this regulatory requirement?

Master Policy

Safe Templates

PVWAConfig.xml

Platform Configuration

NEW QUESTION 95
An auditor initiates a live monitoring session to PSM server to view an ongoing live session. When the auditor’s machine makes an RDP connection the PSM server, which user will be used?

PSMAdminConnect

Shadowuser

PSMConnect

Credentials stored in the Vault for the target machine

NEW QUESTION 96
Which parameter controls how often the CPM looks for accounts that need to be changed from recently
completed Dual control requests.

HeadStartInterval

Interval

ImmediateInterval

The CPM does not change the password under this circumstance

NEW QUESTION 97
Which combination of Safe member permissions will allow end users to log in to a remote machine transparently but NOT show or copy the password?

Use Accounts, Retrieve Accounts, List Accounts

Use Accounts, List Accounts

Use Accounts

List Accounts, Retrieve Accounts

NEW QUESTION 98
The primary purpose of exclusive accounts is to ensure non-repudiation (individual accountability).

TRUE

FALSE

NEW QUESTION 99
In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system. What is the BEST way to allow CPM to manage root accounts.

Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the targetserver’s root account.

Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server’s root account.

Configure the Unix system to allow SSH logins.

Configure the CPM to allow SSH logins.

NEW QUESTION 100
Can the ‘Connect’ button be used to initiate an SSH connection, as root, to a Unix system when SSH access for root is denied?

Yes, when using the connect button, CyberArk uses the PMTerminal.exe process which bypasses the root SSH restriction.

Yes, only if a logon account is associated with the root account and the user connects through the PSM- SSH connection component.

Yes, if a logon account is associated with the root account.

No, it is not possible.

Explanation/Reference: https://www.reddit.com/r/CyberARk/comments/7zx8w5/ssh_connection/

NEW QUESTION 101
What is the primary purpose of Dual Control?

Reduced risk of credential theft

More frequent password changes

Non-repudiation (individual accountability)

To force a ‘collusion to commit’ fraud ensuring no single actor may use a password without authorization.

NEW QUESTION 102
Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

Require dual control password access Approval

Enforce check-in/check-out exclusive access

Enforce one-time password access

Enforce check-in/check-out exclusive access & Enforce one-time password access

NEW QUESTION 103
A logon account can be specified in the platform settings.

True

False

NEW QUESTION 104
In PVWA, you are attempting to play a recording made of a session by user jsmith, but there is no option to “Fast Forward” within the video. It plays and only allows you to skip between commands instead. You are also unable to download the video.
What could be the cause?

Recording is of a PSM for SSH session.

The browser you are using is out of date and needs an update to be supported.

You do not have the “View Audit” permission on the safe where the account is stored.

You need to update the recorder settings in the platform to enable screen capture every 10000 ms or less.

NEW QUESTION 105
Match each PTA alert category with the PTA sensors that collect the data for it.

NEW QUESTION 106
In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

True.

False. Because the user can also enter credentials manually using Secure Connect.

False. Becauseif credentials are not stored in the vault, the PSM will log into the target device as PSM Connect.

False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

NEW QUESTION 107
You want to generate a license capacity report.
Which tool accomplishes this?

Password Vault Web Access

PrivateArk Client

DiagnoseDB Report

RestAPI

NEW QUESTION 108
As long as you are a member of the Vault Admins group you can grant any permission on any safe.

TRUE

FALSE

Being in Vault admins group only give you access to safes which are created during installation (safe created in installation process ) -This is clearly mentioned in documents .

Loading …

Use Real CyberArk Achieve the CAU201 Dumps – 100% Exam Passing Guarantee: https://www.passtestking.com/CyberArk/CAU201-practice-exam-dumps.html

Categories:CAU201CyberArk

Tags:CAU201 Actual test answers CAU201 test fee CAU201 valid test collection pdf new CAU201 mock test

admin

CAU201 Practice Tests

(Aug-2022) CAU201 Exam Dumps Contains FREE Real Quesions from the Actual Exam [Q86-Q108]

Related Certifications

CAU201

Exam Practice Questions

(Aug-2022) CAU201 Exam Dumps Contains FREE Real Quesions from the Actual Exam [Q86-Q108]

For more info visit:

Leave a Reply Cancel reply