CAU302 시험 - CyberArk실제시험문제와 답 - 151문항

Question No : 1

According to the default web options settings, which group grants access to the reports page?

A.PVWAMonitor
B.PVWAUsers
C.Auditors
D.Vault administrators

정답:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/ReportsInPVWA.htm

Question No : 2

In accordance with best practice. SSH access is denied for root accounts on UNIX/LINUX systems.
What is the BEST way to allow CPM to manage root accounts?

A.Create a privileged account on the target server Allow this account the ability to SSH directly from the CPM machine Configure this account as the Reconcile account of the target server's root account.
B.Create a non-privileged account on the target server Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account
C.Configure the Unix system to allow SSH logins.
D.Configure the CPM to allow SSH logins

정답:

Question No : 3

It is possible to disable the Show and Copy buttons without removing the Retrieve permission on a safe.

A.TRUE
B.FALSE

정답:

Question No : 4

One can create exceptions to the Master Policy based on_________.

A.Safes
B.Platforms
C.Policies
D.Accounts

정답:

Question No : 5

Which Master Policy?

A.Password Expiration Time
B.Enabling and Disabling of the Connection Through the PSM
C.Password Complexity
D.The use of "One-Time-Passwords"

정답:

Question No : 6

In a Distributed Vaults environment, which of the following components will NOT be communicating with the Satellite Vaults?

A.AAM Credential Provider (previously known as AIM Credential Provider)
B.ExportVaultData utility
C.PAReplicate utility
D.Central Policy Manager

정답:

Question No : 7

It is possible to control the hours of the day during which a safe may be used.

A.TRUE
B.FALSE

정답:

Question No : 8

Access Control to passwords is implemented by ________________.

A.Virtual Authorizations
B.Safe Authorizations
C.Master Policy
D.Platform Settings

정답:

Question No : 9

Accounts Discovery allows secure connections to domain controllers.

A.TRU
B.FALSE

정답:

Question No : 10

What is the purpose of the password verify process?

A.To test that CyberArk is storing accurate credentials for accounts.
B.To change the password of an account according to organizationally defined password rules.
C.To allow CyberArk to manage unknown or lost credentials.
D.To generate a new complex password.

정답:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Verifying-Passwords.htm#:~:text=The%20CPM%20can%20verify%20password,manually%20by%20 an%20authorized%20user.

Question No : 11

When the PSM Gateway (also known as the HTML5 ( End Point in order to launch connections via the PSM

A.True
B.False, when the PSM Gateway is implemented, the user only requires a browser in order launch a connection via the PSM

정답:

Question No : 12

A logon account can be specified in the platform settings.

A.True
B.False

정답:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Configuring-Accounts-for-Automatic-Management.htm

Question No : 13

Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

A.Accounts Discovery
B.Auto Detection
C.Onboarding RestAPI functions
D.PTA Rules

정답:

Question No : 14

Which of these accounts onboarding methods is considered proactive?

A.Accounts Discovery
B.Detecting accounts with PTA
C.A Rest API integration with account provisioning software
D.A DNA scan

정답:

Question No : 15

The System safe allows access to the Vault configuration files.

A.TRUE
B.FALSE

정답:

CyberArk CAU302 시험