CyberArk Defender + Sentry (CAU302) Free Practice Test

Question 1

A logon account can be specified in the platform settings.

A. False

B. True

Correct Answer: B

Question 2

Which service is optional on the Vault?

A. PrivateArk Remote Control Agent

B. PrivateArk Database

C. CyberArk Hardened Windows Firewall

D. PrivateArk Server

Correct Answer: A

Question 3

The PSM requires the Remote Desktop Web Access role service.

A. False

B. True

Correct Answer: A

Question 4

When on-boarding accounts using Accounts Feed. Which of the following is true"?

A. You must specify an existing Safe where the account will be stored when it is on-boarded to the Vault.

B. You can specify the name of a new Platform that will be created and associated with the account.

C. Any account that is on-boarded can be automatically reconciled regardless of the platform it is associated with

D. You can specify the name of a new safe that will be created where the account will be stored when it is on-boarded to the Vault.

Correct Answer: A

Question 5

What is the process to remove object level access control from a Safe?

A. Remove all ACLs from the Safe.

B. This cannot be done.

C. Uncheck the 'Enable Object Level Access Control' box in the Safe Properties in PrivateArk.

D. Uncheck the 'Enable Object Level Access Control' on the Safe Details page in the PVWA.

Correct Answer: D

Question 6

Users complain they are unsuccessful attempting to authenticate to the PVWA web site. After entering their credentials, they receive a "Timeout has expired". You test the URL using multiple browsers and receive the same error. The CyberArk.WebApplication.log shows the "ITACM012S Timeout has expired" log entry.
What is the next troubleshooting step you should take?

A. Check the CyberArk.WebConsole.log for errors

B. Check the health of the Vault Server and ensure all services are running

C. Check network firewall rules to ensure the PVWA can communicate to the Vault over tcp_1858

D. Run an IISRESET on the PVWA server

Correct Answer: C

Question 7

Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

A. PSM (i.e., launching connections by clicking on the "Connect" button in the PVWA)

B. PSM for SSH (previously known as PSM SSH Proxy)

C. All of the above

D. PSM for Windows (previously known as RDP Proxy)

Correct Answer: A

Question 8

Which file is used to configure new firewall rules on the Vault?

A. padr.ini

B. paragent.ini

C. dbparm.ini

D. firewall.ini

Correct Answer: C

Question 9

Any user can monitor live sessions in real time when initiating RDP connection via Secure Connect through PSM.

A. False

B. True

Correct Answer: A

Question 10

During ENE integration you should specify the Fully-Qualified Domain Name (FQDN) of the SMTP Gateway server.

A. FALSE

B. TRUE

Correct Answer: A

Question 11

Where do you configure in PVWA the fully-qualified domain name (FQDN) of your target email server during SMTP integration?

A. PVWA > Platform Management > Notification Settings

B. PVWA > LDAP Integartion > Notification Settings

C. PVWA > Administration > Notification Settings

D. PVWA > Options > Notification Settings

Correct Answer: C

Question 12

Which type of automatic remediation can be performed by the PTA in case of a Suspecious Password Change security event?

A. Session Terminiation

B. Password Reconcilation

C. Password Change

D. Session Suspension

Correct Answer: C

Welcome to TestSimulate

CyberArk Defender + Sentry (CAU302) Free Practice Test