New (2022) Download free CAU301 PDF for CyberArk Practice Tests [Q17-Q40]

Share

New (2022) Download free CAU301 PDF for CyberArk Practice Tests

100% Free CAU301 Files For passing the exam Quickly


Difficulty in writing CAU301 Exam

Look for the latest CAU-3011 exam dumps pdf, get relevant CAU-301 practice exams and CAU-301 practice test and develop knowledge about CyberArk CAU301 exam new questions. It can stress out some people as they find passing CyberArk CAU301 exam a tough task. PrepPDF offers a exams and exam dumps which are more than enough to pass the CyberArk CAU301 exam questions. We are providing CyberArk CAU301 PDF exam dumps that will help the candidate to pass the exam with good grades.

There are CyberArk Certified Delivery Engineer CyberArk CDE, CyberArk Sentry (Level 3) CyberArk Sentry Exam questions and answers related to the syllabus of the CyberArk CAU301 exam, which are answered by the certified experts. It is covered with all the topics that are included in the CAU301 exam syllabus in the pdf exam dumps. So the format PrepPDF offer is reliable and with all the relevant information.

Passing the CyberArk CAU301 isn't a task for every person. One needs to get one of the most reliable CyberArk CAU301 pdf exam dumps to make themselves able to obtain the CyberArk Sentry certification exam in the very first effort. Obtaining the CyberArk CAU301 exam dumps pdf from DumpsWeb is the ideal choice for any individual that agrees to pass the CyberArk Sentry test questions in the first effort. CyberArk CAU301 exam dumps that have been made up by remembering the real Level 3 Sentry exam circumstance. These CAU301 method questions make you able to obtain the in-depth understanding of the CyberArk Sentry test questions. As the professionals from all domain name makes their complete initiative to make the CyberArk PAS Solution CAU301 exam dumps pdf.

It can be downloaded easily where ever you want. You can keep the preparation exam dumps PDF for the CyberArk Sentry Exam CAU301 exam on your mobile, PC, tablet, etc. this will help you to prepare yourself whenever you get time.


What is the format of the CAU301 Exam

  • Passing score: 70%
  • Format: Multiple choices, multiple answers
  • Length of Examination: 90 minutes
  • Number of Questions: 40

 

NEW QUESTION 17
The Remote Desktop Services role must be property licensed by Microsoft.

  • A. TRUE
  • B. FALSE

Answer: B

 

NEW QUESTION 18
You are successfully managing passwords in the alpha.cyberark.com domain; however, when you attempt to manage a password in the beta.cyberark.com domain, you receive the 'network path not found' error. What should you check first?

  • A. That the CPM can successfully resolve addresses in the beta.cyberark.com domain.
  • B. That the end user has the correct permissions on the safe.
  • C. That an appropriate trust relationship exists between alpha.cyberark.com and beta.ceberark.com
  • D. That the username and password are correct.

Answer: A

 

NEW QUESTION 19
To apply a new license file you must:

  • A. Upload the license.xml file to the Vaultlnternal Safe and restart the PrivateArk Server service.
  • B. Upload the license.xml file to the System Safe and restart the PrivateArk Server service.
  • C. Upload the license.xml file to the Vaultlnternal Safe.
  • D. Upload the license.xml file to the System Safe

Answer: A

 

NEW QUESTION 20
By default, the vault secure protocol uses which IP port and protocol.

  • A. TCP/443
  • B. TCP/1858
  • C. TCP/80
  • D. UDP/1858

Answer: B

Explanation:
Explanation/Reference: http://docplayer.net/53689072-The-cyberark-digital-vault-built-for-security.html

 

NEW QUESTION 21
Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.

  • A. Safe Key
  • B. Recovery Public Key
  • C. Recovery Private Key
  • D. Server Key

Answer: C

 

NEW QUESTION 22
You are successfully managing passwords in the alpha cyberark com domain; however, when you attempt to manage a password in the beta cyberark com domain, you receive the 'network path not found' error. What should you check first?

  • A. That the CPM can successfully resolve addresses in the beta cyberark com domain
  • B. That the end user has the correct permissions on the safe.
  • C. That an appropriate trust relationship exists between alpha.cyberark com and beta cyberark.com
  • D. That the username and password are correct

Answer: C

 

NEW QUESTION 23
A vault admin received an email notification that a password verification process has failed Which service sent the message?

  • A. The PrivateArk Server Service on the Vault.
  • B. The CyberArk Password Manager service on the Components Server.
  • C. The CyberArk Privileged Session Manager service on the Vault.
  • D. The CyberArk Event Notification Engine Service on the Vault

Answer: D

 

NEW QUESTION 24
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply

  • A. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.
  • B. Store the CD in a physical safe and mount the CD every time vault maintenance is performed.
  • C. Store the server key in the Provider cache
  • D. Store the server key in a Hardware Security Module.
  • E. Copy the contents of the CD to the System Safe on the vault

Answer: C

 

NEW QUESTION 25
Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?

  • A. PARagent.ini
  • B. ENEConf.ini
  • C. dbparm.ini
  • D. padr.ini

Answer: B

 

NEW QUESTION 26
Which keys are required to be present in order to start the PrivateArk Server Service?

  • A. Recovery Private Key
  • B. Safe Key
  • C. Recovery Public Key
  • D. Server Key

Answer: D

Explanation:
Explanation/Reference: https://www.reddit.com/r/CyberARk/comments/8s96n8/certificat_problem_with_my_vault/

 

NEW QUESTION 27
When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.

  • A. True if the 'AllowFailback' setting is set to yes in the dbparm mi file
  • B. True, this is the default behavior
  • C. True, if the 'AllowFailback' setting is set to yes in the PADR.ini file.
  • D. False, this is not possible

Answer: B

 

NEW QUESTION 28
What utility is used to create or update a credential file?

  • A. CAVaultManager.exe
  • B. Central Policy Manager
  • C. CreateCredFile exe
  • D. Password Vault Web Access

Answer: C

 

NEW QUESTION 29
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? Choose all that apply.

  • A. Copy the contents of the CD to the System Safe on the vault.
  • B. Store the server key in a Hardware Security Module.
  • C. Store the server key in the Provider cache.
  • D. Store the CS in a physical safe and mount the CD every time vault maintenance is performed.
  • E. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.

Answer: B,E

 

NEW QUESTION 30
The security of the Vault Server is entirely dependent on the security of the network.

  • A. FALSE
  • B. TRUE

Answer: B

 

NEW QUESTION 31
What is the name of the account used to establish the initial RDP session from the end user client machine to the PSM server?

  • A. The credentials the end user retrieved from the vault.
  • B. PSMAdminConnect
  • C. PSM
  • D. PSMConnect

Answer: D

 

NEW QUESTION 32
If a transparent user matches two different directory mappings, how does the system determine which user template to use?

  • A. The system will grant only the vault authorizations that are listed in both templates
  • B. The system will grant all of the vault authorizations from the two templates.
  • C. The system will use the template for the mapping listed last.
  • D. The system will use the template for the mapping listed first.

Answer: B

 

NEW QUESTION 33
Which of the following protocols need to be installed on a standalone vault server? Check all that apply.

  • A. QoS Packet Scheduler
  • B. Internet Protocol version 4 (TCP/IPv4)
  • C. NIC Teaming Driver, if applicable
  • D. Client for Microsoft Networks
  • E. File and Printer Sharing for Microsoft Networks

Answer: A,B,D,E

 

NEW QUESTION 34
The connect button requires PSM to work.

  • A. TRUE
  • B. FALSE

Answer: B

 

NEW QUESTION 35
What is the purpose of the password Reconcile process?

  • A. To allow CyberArk to manage unknown or lost credentials.
  • B. To generate a new complex password.
  • C. To test that CyberArk is storing accurate credentials for accounts.
  • D. To change the password of an account according to organizationally defined password rules

Answer: C

 

NEW QUESTION 36
The primary purpose of the CPM is Password Management.

  • A. FALSE
  • B. TRUE

Answer: B

Explanation:
Explanation/Reference: https://www.cse-cst.gc.ca/en/system/files/pdf_documents/cyberark-v91-sec-eng.pdf (7)

 

NEW QUESTION 37
What is the best practice for storing the Master CD?

  • A. Copy the files to the Vault server and discard the CD.
  • B. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder (secured with NTFS permissions} on the vault.
  • C. Copy the contents of the CD to a Hardware Security Module and discard the CD.
  • D. Store the CD in a secure location, such as a physical safe.

Answer: B

 

NEW QUESTION 38
Which of the following are supported authentication methods for CyberArk? Check all that apply.

  • A. OracleSSO
  • B. Biometric
  • C. PKI
  • D. RADIUS
  • E. LDAP
  • F. SAML
  • G. CyberArk Password (SRP)

Answer: C,D,E

Explanation:
Explanation/Reference: https://training.cyberark.com/instructor-led-training/cyberark-privileged-account-security-pas-install- and-configure

 

NEW QUESTION 39
What is the purpose of the password Reconcile process?

  • A. To test that CyberArk is storing accurate credentials for accounts.
  • B. To allow CyberArk to manage unknown or lost credentials.
  • C. To change the password of an account according to organizationally defined password rules.
  • D. To generate a new complex password.

Answer: C

Explanation:
Explanation/Reference: https://www.cyberark.com/blog/securing-privileged-accounts-best-practices-guide-part-4/

 

NEW QUESTION 40
......


For more info visit:

CAU301 Exam Reference

 

CAU301 Premium Exam Engine - Download Free PDF Questions: https://measureup.preppdf.com/CyberArk/CAU301-prepaway-exam-dumps.html