CAU201 : CyberArk Defender Exam

CyberArc
CAU201
CyberArk Defender
https://killexams.com/pass4sure/exam-detail/CAU201
Question: 105
PSM captures a record of each command that was executed in Unix.
A. TRUE
B. FALSE
Answer: A
Question: 106
It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.
A. TRUE
B. FALSE
Answer: A
Question: 107
Which report provides a list of accounts stored in the vault.
A. Privileged Accounts Inventory
B. Privileged Accounts Compliance Status
C. Entitlement Report
D. Activity Log
Answer: A
Explanation:
Reference: https://techinsight.com.vn/language/en/privileged-account-security-solution-part-2/
Question: 108
As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have
access to.
A. TRUE
B. FALSE
Answer: B
Question: 109
Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that
apply.
A. PAR Agent
B. PrivateArk Server Central Administration
C. Edit DBParm.ini in a text editor.
D. Setup.exe
Answer: A
Question: 110
What is the purpose of the Immediate Interval setting in a CPM policy?
A. To control how often the CPM looks for System Initiated CPM work.
B. To control how often the CPM looks for User Initiated CPM work.
C. To control how long the CPM rests between password changes.
D. To control the maximum amount of time the CPM will wait for a password change to complete.
Answer: C
Question: 111
When on-boarding account using Accounts Feed, which of the following is true?
A. You must specify an existing Safe where the account will be stored when it is on-boarded to the Vault.
B. You can specify the name of a new safe that will be created where the account will be stored when it is on-boarded
to the Vault.
C. You can specify the name of a new Platform that will be created and associated with the account.
D. Any account that is on-boarded can be automatically reconciled regardless of the platform it is associated with.
Answer: C
Explanation:
Reference: https://www.cyberark.com/resource/automating-privileged-account-onboarding/
Question: 112
If a user is a member of more than one group that has authorizations on a safe, by default that user is
granted____________________.
A. the vault will not allow this situation to occur.
B. only those permissions that exist on the group added to the safe first.
C. only those permissions that exist in all groups to which the user belongs.
D. the cumulative permissions of all the groups to which that user belongs.
Answer: B
Question: 113
All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in
that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on
those passwords at any time without confirmation. The members of the AD group OperationsStaff need to be able to
use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a
member of OperationsManagers. The members of OperationsManagers never need to be able to use the show, copy or
connect buttons themselves.
Which safe permissions do you need to grant to OperationsStaff? Check all that apply.
A. Use Accounts
B. Retrieve Accounts
C. List Accounts
D. Authorize Password Requests
E. Access Safe without Authorization
Answer: A
Question: 114
Platform settings are applied to______________.
A. The entire vault.
B. Network Areas
C. Safes
D. Individual Accounts
Answer: C
Explanation:
Reference: https://www.reddit.com/r/CyberARk/comments/avxnxz/safes_and_platform_association/
Question: 115
Which of the following files must be created or configured in order to run Password Upload Utility? Select all that
apply.
A. PACli.ini
B. Vault.ini
C. conf.ini
D. A comma delimited upload file
Answer: C
Explanation:
Reference: https://www.reddit.com/r/CyberARk/comments/84gfsb/password_upload_utility_error/
Question: 116
For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you
configure a group of users to access a password without approval.
A. Create an exception to the Master Policy to exclude the group from the workflow process.
B. Edit the master policy rule and modify the advanced ‘Access safe without approval’ rule to include the group.
C. On the safe in which the account is stored grant the group the ‘Access safe without audit’ authorization.
D. On the safe in which the account is stored grant the group the ‘Access safe without confirmation’ authorization.
Answer: A
Explanation:
Reference: https://www.reddit.com/r/CyberARk/comments/6270zr/dual_control_on_specific_accounts/
Question: 117
VAULT authorizations may be granted to ____________________. Select all that apply.
A. Vault Users
B. Vault Groups
C. LDAP Users
D. LDAP Groups
Answer: C
Question: 118
A Logon Account can be specified in the Master Policy.
A. TRUE
B. FALSE
Answer: B
Question: 119
What is the name of the Platform parameter that controls how long a password will stay valid when One Time
Passwords are enabled via the Master Policy?
A. MinValidityPeriod
B. Interval
C. ImmediateInterval
D. Timeout
Answer: D
Question: 120
Customers who have the ‘Access Safe without confirmation’ safe permission on a safe where accounts are configured
for Dual control, still need to request approval to use the account.
A. TRUE
B. FALSE
Answer: B
For More exams visit https://killexams.com/vendors-exam-list

User: Eugene***** I took advantage of the practice tests provided by killexams.com, which were rich with information and effective content that I was looking for in my preparation. The material boosted my confidence and provided me with the self-assurance to take my cyberark defender exam. The material was so close to the actual exam questions that, as a non-native English speaker, I completed the exam in 95 minutes instead of the allocated 120 minutes. Thank you for the excellent practice test.

User: Tania***** I was ranked very low among my classmates until I registered for assistance with Killexams.com for a few exams. It was the intensive study program provided by Killexams.com that helped me become one of the high-ranking college students in my class. Their CAU201 PDF, CAU201 practice tests, and CAU201 books were precise and significantly beneficial in my preparation. Thank you, Killexams.com, for helping me achieve my goals.

User: Tatjana***** Killexams.com is the best cau201 aid available on the internet. I consider it to be invaluable because it gave me something more valuable than money: training. When I registered for an account on the site, I was studying for my cau201 exam, and what I received in return was like magic. My cau201 exam seemed like a breeze, and I passed it with ease.

User: Rashelle***** Killexams.com has excellent products for college students who are interested in the cau201 certification training. I made a great decision to choose Killexams.com as the cau201 exam engine has outstanding test content that is easy to comprehend in a brief time frame. I am grateful to the brilliant crew who helped me in my career development, guiding me to answer all vital questions and get the highest scores. It was a top-notch decision that made me a fan of Killexams, and I have decided to come back again.

User: Sanya***** Enrolling with killexams.com was a great opportunity for me to pass the CYBERARK DEFENDER exam. It gave me the chance to tackle the difficult questions of the CYBERARK DEFENDER exam, which I would have found challenging otherwise. After failing the exam, I was shattered, but killexams.com made my path easy.

---