Instant Download CAU201 Dumps Q&As Provide PDF&Test Engine [Q12-Q33]

Rate this post

Instant Download CAU201 Dumps Q&As Provide PDF&Test Engine

Fast Exam Updates CAU201 dumps with PDF Test Engine Practice

NO.12 Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.

PACli.ini

Vault.ini

conf.ini

A comma delimited upload file

NO.13 When on-boarding account using Accounts Feed, which of the following is true?

You must specify an existing Safe where the account will be stored when it is on-boarded to the Vault.

You can specify the name of a new safe that will be created where the account will be stored when it is on-boarded to the Vault.

You can specify the name of a new Platform that will be created and associated with the account.

Any account that is on-boarded can be automatically reconciled regardless of the platform it is associated with.

Explanation/Reference:
Reference: https://www.cyberark.com/resource/automating-privileged-account-onboarding/

NO.14 What is the maximum number of levels of authorizations you can set up in Dual Control?

NO.15 An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?

PSMConnect

PSMMaster

PSMGwUser

PSMAdminConnect

NO.16 Which keys are required to be present in order to start the PrivateArk Server service?

Recovery public key

Recovery private key

Server key

Safe key

NO.17 Which user(s) can access all passwords in the Vault?

Administrator

Any member of Vault administrators

Any member of auditors

Master

NO.18 tsparm.ini is the main configuration file for the Vault.

True

False

NO.19 The System safe allows access to the Vault configuration files.

TRUE

FALSE

NO.20 Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

Accounts Discovery

Auto Detection

Onboarding RestAPI functions

PTA Rules

NO.21 Accounts Discovery allows secure connections to domain controllers.

TRUE

FALSE

Explanation/Reference:

NO.22 A Reconcile Account can be specified in the Master Policy.

TRUE

FALSE

NO.23 A Logon Account can be specified in the Master Policy.

TRUE

FALS

NO.24 A user is receiving the error message “ITATS006E Station is suspended for User jsmith” when attempting to sign into the Password Vault Web Access (PVWA). Which utility would a Vault administrator use to correct this problem?

createcredfile.exe

cavaultmanager.exe

PrivateArk

PVWA

NO.25 You are creating a Dual Control workflow for a team’s safe.
Which safe permissions must you grant to the Approvers group?

List accounts, Authorize account request

Retrieve accounts, Access Safe without confirmation

Retrieve accounts, Authorize account request

List accounts, Unlock accounts

NO.26 Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

Require dual control password access Approval

Enforce check-in/check-out exclusive access

Enforce one-time password access

Enforce check-in/check-out exclusive access & Enforce one-time password access

NO.27 What is the purpose of the HeadStartlnterval setting m a platform?

It determines how far in advance audit data is collected tor reports

It instructs the CPM to initiate the password change process X number of days before expiration.

It instructs the AIM Provider to ‘skip the cache’ during the defined time period

It alerts users of upcoming password changesxnumber of days before expiration.

NO.28 For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

Create an exception to the Master Policy to exclude the group from the workflow process.

Edit the master policy rule and modify the advanced ‘Access safe without approval’ rule to include the group.

On the safe in which the account is stored grant the group the ‘Access safe without audit’ authorization.

On the safe in which the account is stored grant the group the ‘Access safe without confirmation’ authorization.

Explanation/Reference: https://www.reddit.com/r/CyberARk/comments/6270zr/dual_control_on_specific_accounts/

NO.29 Which parameter controls how often the CPM looks for accounts that need to be changed from recently
completed Dual control requests.

HeadStartInterval

Interval

ImmediateInterval

The CPM does not change the password under this circumstance

NO.30 Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select
all that apply.

PAR Agent

PrivateArk Server Central Administration

Edit DBParm.ini in a text editor.

Setup.exe

NO.31 PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

True

False, the PTA can suspend sessions whether the session is made via the PSM or not

NO.32 When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

True; this is the default behavior

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the padr.ini file

True, if the AllowFailback setting is set to “yes” in the padr.ini file

False, the Vault administrator must manually set the DR Vault to DR mode by setting “FailoverMode=no” in the dbparm.ini file

NO.33 SAFE Authorizations may be granted to _________________.
Select all that apply.

Vault Users

Vault Groups

LDAP Users

LDAP Groups