CyberArk Defender + Sentry - CAU302 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

The Vault can only integrate with a single Security Information and Event Management (SIEM) or SYSLOG server.

A. True B. False

Discussion 0

Correct Answer: B Vote an answer

Question 2

In order to connect to a target device through PSM. the account credentials used for the connection must be stored in the vault?

A. False Because if credentials are not stored in the vault, the PSM will prompt for credentials The PSM enables users to connect securely to remote machines through the PSM from their own workstations using all types of accounts, including accounts that are not managed in the CyberArk Vault. B. True C. False. Because the user can also enter credentials manually using Secure Connect D. False. Because if credentials are not stored in the vault, the PSM will log into the target device as PSMConnect.

Discussion 0

Correct Answer: C Vote an answer

Question 3

Ad-Hoc Access (formerly Secure Connect) provides the following features. (Choose all that apply.)

A. PSM connections to target devices that are not managed by CyberArk B. Session Recording C. PSM connections from a terminal without the need to login to the PVWA D. Real-time live session monitoring

Discussion 0

Correct Answer: A,B,D Vote an answer

Question 4

Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.

A. FALSE B. TRUE

Discussion 0

Correct Answer: A Vote an answer

Question 5

tsparm.ini is the main configuration file for the vault.

A. FALSE B. TRUE

Discussion 0

Correct Answer: A Vote an answer

Question 6

PSM captures a record of each command that was issues in SQL Plus.

A. FALSE B. TRUE

Discussion 0

Correct Answer: B Vote an answer

Question 7

If a user is a member of more than one group that has authorizations on a safe, by default that user is granted
__________________.

A. the cumulative permissions of all the groups to which that user belongs B. only those permissions that exist in all groups to which the user belongs. C. only those permissions that exist on the group added to the safe first. D. the vault will not allow this situation to occur.

Discussion 0

Correct Answer: A Vote an answer

Question 8

Users complain they are unsuccessful attempting to authenticate to the PVWA web site. After entering their credentials, they receive a "Timeout has expired". You test the URL using multiple browsers and receive the same error. The CyberArk.WebApplication.log shows the "ITACM012S Timeout has expired" log entry.
What is the next troubleshooting step you should take?

A. Check network firewall rules to ensure the PVWA can communicate to the Vault over tcp_1858 B. Run an IISRESET on the PVWA server C. Check the CyberArk.WebConsole.log for errors D. Check the health of the Vault Server and ensure all services are running

Discussion 0

Correct Answer: A Vote an answer

Question 9

Which of the following logs contain information about errors related to PTA?

A. WebApplication.log B. pm_error.log C. diamond.log D. ITAlog.log

Discussion 0

Correct Answer: C Vote an answer

Question 10

You are successfully managing passwords in the alpha.cyberark com domain; however when you attempt to manage a password in the beta.cyberark.com domain, you receive the 'network path not found* error What should you check first?

A. That the CPM can successfully resolve addresses in the beta cyberark com domain B. That an appropriate trust relationship exists between alphaxyberark.com and beta.cyberark.com C. That the end user has the correct permissions on the safe D. That the username and password are correct.

Discussion 0

Correct Answer: A Vote an answer

Question 11

When working with the CyberArk High Availability Cluster, which services are running on the passive node?

A. Cluster Vault Manager and PrivateArk Database B. Cluster Vault Manager C. Cluster Vault Manager and Remote Control Agent D. Cluster Vault Manager, PrivateArk Database and Remote Control Agent

Discussion 0

Correct Answer: A Vote an answer

Question 12

If a transparent user belongs two different directory mappings, how does the system determine which user template to use?

A. The system will use the template for the mapping listed first. B. The system will use the template for the mapping listed last. C. The system will grant only the vault authorizations that are listed in both templates. D. The system will grant all of the vault authorizations from the two templates.

Discussion 0

Correct Answer: A Vote an answer

Question 13

Which file is used to integrate the Vault with your Radius server?

A. ENEConf.ini B. paragent ini C. radius.ini D. dbparm.ini

Discussion 0

Correct Answer: D Vote an answer