CyberArk CAU302 Exam Questions Instant Access

Question 1

Which of the following options is not set in the Master Policy?

APassword Expiration Date

BDual Control

CPassword Complexity

DRequire Access Reason

Answer : D

Question 2

Which of the following statements are NOT true when enabling PSM recording for a target Windows server? Choose all that apply

AThe PSM software must be installed on the target server

BPSM must be enabled in the Master Policy {either directly, or through exception).

CPSMConnect must be added as a local user on the target server

DRDP must be enabled on the target server

Answer : A

Question 3

The vault supports a number of dual factor authentication methods.

ATRUE

BFALSE

Answer : A

Question 4

All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe The members of the AD group UnixAdmms need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of OperationsManagers The members of OperationsManagers never need to be able to use the show, copy or connect buttons themselves.

Which safe permissions do you need to grant to UnixAdmins? Check all that apply

AUse Accounts

BRetrieve Accounts

CList Accounts

DAuthorize Password Requests

EAccess Safe without Authorization

Answer : A, B, C, E

Question 5

In accordance with best practice. SSH access is denied for root accounts on UNIX/LINUX systems. What is the BEST way to allow CPM to manage root accounts.

ACreate a privileged account on the target server Allow this account the ability to SSH directly from the CPM machine Configure this account as the Reconcile account of the target server's root account.

BCreate a non-privileged account on the target server Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account

CConfigure the Unix system to allow SSH logins.

DConfigure the CPM to allow SSH logins

Answer : B

Question 6

An SMTP integration allows you to forward audit records to a monitoring solution.

ATRUE

BFALSE

Answer : B

Question 7

PSM captures a record of each command that was issues in SQL Plus.

ATRUE

BFALSE

Answer : A

CyberArk Defender + Sentry CAU302 Exam Questions