CyberArk CAU201 問題練習

Question No : 1
Via Password Vault Web Access (PVWA), a user initiates a PSM connection to the target Linux machine using RemoteApp.
When the client’s machine makes an RDP connection to the PSM server, which user will be utilized?

• A.Credentials stored in the Vault for the target machine
• B.Shadowuser
• C.PSMConnect
• D.PSMAdminConnect

答えを確認する

正解:

Question No : 2
To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?

• A.List Accounts, Use Accounts
• B.List Accounts, Use Accounts, Retrieve Accounts
• C.Use Accounts
• D.List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation

答えを確認する

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/PSSO-PSMConnecPVWA.htm?TocPath=End%20User%7CConnect%20to%20Accounts%7CPrivileged%20Single%20Sign-On%7C_____2

Question No : 3
In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX system .
What is the BEST way to allow CPM to manage root accounts?

• A.Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server’s root account.
• B.Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server’s root account.
• C.Configure the Unix system to allow SSH logins.
• D.Configure the CPM to allow SSH logins.

答えを確認する

正解:

Question No : 4
You are logging into CyberArk as the Master user to recover an orphaned safe.
Which items are required to log in as Master?

• A.Master CD, Master Password, console access to the Vault server, Private Ark Client
• B.Operator CD, Master Password, console access to the PVWA server, PVWA access
• C.Operator CD, Master Password, console access to the Vault server, Recover.exe
• D.Master CD, Master Password, console access to the PVWA server, Recover.exe

答えを確認する

正解:
Explanation:
Reference: https://cyberark-customers.force.com/s/article/How-to-log-in-as-the-Master-user

Question No : 5
DRAG DROP
Arrange the steps to restore a Vault using PARestore for a Backup in the correct sequence.

答えを確認する

正解:

Question No : 6
A user is receiving the error message “ITATS006E Station is suspended for User jsmith” when attempting to sign into the Password Vault Web Access (PVWA) .
Which utility would a Vault administrator use to correct this problem?

• A.createcredfile.exe
• B.cavaultmanager.exe
• C.PrivateArk
• D.PVWA

答えを確認する

正解:

Question No : 7
Which option in the Private Ark client is used to update users’ Vault group memberships?

• A.Update > General tab
• B.Update > Authorizations tab
• C.Update > Member Of tab
• D.Update > Group tab

答えを確認する

正解:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm?TocPath=Administration%7CUser%20Management%7C_____7

Question No : 8
A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

• A.True
• B.False

答えを確認する

正解:

Question No : 9
The password upload utility must run from the CPM server

• A.TRUE
• B.FALSE

答えを確認する

正解:

Question No : 10
What is the purpose of the PrivateArk Database service?

• A.Communicates with components
• B.Sends email alerts from the Vault
• C.Executes password changes
• D.Maintains Vault metadata

答えを確認する

正解:

Question No : 11
tsparm.ini is the main configuration file for the Vault.

• A.True
• B.False

答えを確認する

正解:

Question No : 12
VAULT authorizations may be granted to_____.

• A.Vault Users
• B.Vault Groups
• C.LDAP Users
• D.LDAP Groups

答えを確認する

正解:

Question No : 13
Within the Vault each password is encrypted by:

• A.the server key
• B.the recovery public key
• C.the recovery private key
• D.its own unique key

答えを確認する

正解:

Question No : 14
CyberArk recommends implementing object level access control on all Safes.

• A.True
• B.False

答えを確認する

正解:

Question No : 15
Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that apply.

• A.PAR Agent
• B.PrivateArk Server Central Administration
• C.Edit DBParm.ini in a text editor.
• D.Setup.exe

答えを確認する

正解:
Explanation:
PAR-Private Ark Remote Control Agent allows you to perform several Vault admin tasks (without restarting the Vault) and view machine statistics.