Accurate Hot Selling CAU201 Exam Dumps 2023 Newly Released [Q35-Q58]

NO.35 It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

TRUE

FALS

NO.36 You are onboarding an account that is not supported out of the box.
What should you do first to obtain a platform to import?

Create a service ticket in the customer portal explaining the requirements of the custom platform.

Search common community portals like stackoverflow, reddit, github for an existing platform.

From the platforms page, uncheck the “Hide non-supported platforms” checkbox and see if a platform meeting your needs appears.

Visit the CyberArk marketplace and search for a platform that meets your needs.

NO.37 What is the purpose of a linked account?

To ensure that a particular collection of accounts all have the same password.

To ensure a particular set of accounts all change at the same time.

To connect the CPNI to a target system.

To allow more than one account to work together as part of a password management process.

NO.38 A Reconcile Account can be specified in the Master Policy.

TRUE

FALSE

NO.39 The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.
How are these keys managed?

CyberArk stores Private keys in the Vault and updates Public keys on target systems.

CyberArk stores Public keys in the Vault and updates Private keys on target systems.

CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.

CyberArk stores both Private and Public keys and can update target systems with either key.

NO.40 What is the configuration file used by the CPM scanner when scanning UNIX/Linux devices?

UnixPrompts.ini

plink.exe

dbparm.ini

PVConfig.xml

NO.41 Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

Accounts Discovery

Auto Detection

Onboarding RestAPI functions

PTA Rules

NO.42 It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur

TRUE

FALSE

NO.43 If a user is a member of more than one group that has authorizations on a safe, by default that user is granted________.

the vault will not allow this situation to occur.

only those permissions that exist on the group added to the safe first.

only those permissions that exist in all groups to which the user belongs.

the cumulative permissions of all groups to which that user belongs.

NO.44 If a password is changed manually on a server, bypassing the CPM, how would you configure the account so
that the CPM could resume management automatically?

Configure the Provider to change the password to match the Vault’s Password

Associate a reconcile account and configure the platform to reconcile automatically.

Associate a logon account and configure the platform to reconcile automatically.

Run the correct auto detection process to rediscover the password.

NO.45 By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

Vault Admins

Security Admins

Security Operators

Auditors

NO.46 Arrange the steps to restore a Vault using PARestore for a Backup in the correct sequence.

NO.47 Which Automatic Remediation is configurable for a PTA detection of a “Suspected Credential Theft”?

Add to Pending

Rotate Credentials

Reconcile Credentials

Disable Account

NO.48 You have been asked to turn off the time access restrictions for a safe.
Where is this setting found?

PrivateArk

RestAPI

Password Vault Web Access (PVWA)

Vault

NO.49 Which of the following logs contains information about errors related to PTA?

ITAlog.log

diamond.log

pm_error.log

WebApplication.log

NO.50 Ad-Hoc Access (formerly Secure Connect) provides the following features. Choose all that apply.

PSM connections to target devices that are not managed by CyberArk.

Session Recording.

Real-time live session monitoring.

PSM connections from a terminal without the need to login to the PVWA.

NO.51 Customers who have the ‘Access Safe without confirmation’ safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

TRUE

FALSE

NO.52 When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

True; this is the default behavior

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the padr.ini file

True, if the AllowFailback setting is set to “yes” in the padr.ini file

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the dbparm.ini file

NO.53 You have associated a logon account to one your UNIX cool accounts in the vault. When attempting to
[b]change [/b] the root account’s password the CPM will…..

Log in to the system as root, then change root’s password

Log in to the system as the logon account, then change roofs password

Log in to the system as the logon account, run the su command to log in as root, and then change root’s password.

None of these

NO.54 In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

True.

False. Because the user can also enter credentials manually using Secure Connect.

False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSMConnect.

False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.

NO.55 The vault supports Role Based Access Control.

TRUE

FALSE

NO.56 For a safe with Object Level Access enabled you can turn off Object Level Access Control when it no longer needed on the safe.

TRUE

FALSE

NO.57 What is the maximum number of levels of authorizations you can set up in Dual Control?

1

2

3

4

NO.58 Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.

TRUE

FALSE