CyberArk cau301 practice test

Which of the following protocols need to be installed on a standalone vault server?

• A. Check all that apply
• B. Client for Microsoft Networks
• C. QoS Packet Scheduler
• D. File and Printer Sharing for Microsoft Networks
• E. Internet Protocol Version 4 (TCP/IPv4)
• F. NIC Teaming Driver, if applicable

Does CyberArk need service accounts on each server to change passwords?

• A. Yes. it requires a domain administrator account to change any password on any server.
• B. Yes. it requires a local administrator account on any Windows server and a root level account on any Unix server.
• C. No. passwords are changed by the Password Provider Agent.
• D. No. the CPM uses the account information stored in the vault to login and change the account's password using its own credentials

The RemoteApp feature of PSM allows seamless Application windows (i e the Desktop of the PSM
server will not be visible)

• A. TRUE
• B. FALSE

Which is the correct order of installation for PAS components?

• A. Vault, CPM. PVWA, PSM
• B. CPM, Vault. PSM, PVWA
• C. Vault, CPM. PSM, PVWA
• D. PVWA, Vault, CPM, PSM

What would be a good use case for the Disaster Recovery module?

• A. Recovery Time Objectives or Recovery Point Objectives are at or near zero.
• B. Integration with an Enterprise Backup Solution is required.
• C. Off site replication is required.
• D. PSM is used.

The security of the Vault Server is entirely dependent on the security of the network.

• A. TRUE
• B. FALSE

Which of the following are supported authentication methods for CyberArk? Check all that apply

• A. CyberArk Password (SRP)
• B. LDAP
• C. SAML
• D. PKI
• E. RADIUS
• F. OracleSSO
• G. Biometric

At what point is a transparent user provisioned in the vault?

• A. When a directory mapping matching that user id is created.
• B. When a vault admin runs LDAP configuration wizard.
• C. The first time the user logs in.
• D. During the vault's nightly LD|^P refresh

To apply a new license file you must:

• A. Upload the license.xml file to the System Safe
• B. Upload the license.xml file to the Vaultlnternal Safe.
• C. Upload the license.xml file to the System Safe and restart the PrivateArk Server service.
• D. Upload the license.xml file to the Vaultlnternal Safe and restart the PrivateArk Server service.

What is the name of the account used to establish the initial RDP session from the end user client
machine to the PSM server?

• A. PSMConnect
• B. PSMAdminConnect
• C. PSM
• D. The credentials the end user retrieved from the vault

You are successfully managing passwords in the alpha cyberark com domain; however, when you
attempt to manage a password in the beta cyberark com domain, you receive the 'network path not
found' error. What should you check first?

• A. That the username and password are correct
• B. That the CPM can successfully resolve addresses in the beta cyberark com domain
• C. That the end user has the correct permissions on the safe.
• D. That an appropriate trust relationship exists between alpha.cyberark com and beta cyberark.com

What utility is used to create or update a credential file?

• A. CreateCredFile exe
• B. CAVaultManager.exe
• C. Central Policy Manager
• D. Password Vault Web Access

What is the best practice for storing the Master CD?

• A. Copy the files to the Vault server and discard the CD.
• B. Copy the contents of the CD to a Hardware Security Module and discard the CD.
• C. Store the CD in a secure location, such as a physical safe.
• D. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions} on the vault.

By default, the vault secure protocol uses which IP port and protocol.

• A. TCP/1858
• B. TCP/443
• C. UDP/1858
• D. TCP/80

After a PSM session is complete, the PSM server uploads the recording to the Vault for long-term
storage.

• A. TRUE
• B. FALSE