2021 Update CyberArk Defender CAU201 Questions and Answers.pdf

1. CAU201 Free Questions CAU201 Free Questions CyberArk Defender CyberArk Defender https://www.passquestion.com/ https://www.passquestion.com/CAU201 CAU201.html .html

2. Question 1 Question 1 A user has successfully conducted a short PSM session and logged off. However, the user A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings. cannot access the Monitoring tab to view the recordings. What is the issue? What is the issue? A. The user must login as PSMAdminConnect A. The user must login as PSMAdminConnect B. The PSM service is not running B. The PSM service is not running C. The user is not a member of the PVWAMonitor group C. The user is not a member of the PVWAMonitor group D. The user is not a member of the Auditors group D. The user is not a member of the Auditors group Answer: D Answer: D

3. Question 2 Question 2 When creating an onboarding rule, it will be executed upon . When creating an onboarding rule, it will be executed upon . A. All accounts in the pending accounts list A. All accounts in the pending accounts list B. Any future accounts discovered by a discovery process B. Any future accounts discovered by a discovery process C. Both “All accounts in the pending accounts list” and “Any future accounts discovered by a C. Both “All accounts in the pending accounts list” and “Any future accounts discovered by a discovery process” discovery process” Answer: B Answer: B

4. Question 3 Question 3 All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group Operations Staff need to be able to use the show, copy and connect members of the AD group Operations Staff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of buttons on those passwords on an emergency basis, but only with the approval of a member of Operations Managers never need to be able to use the show, copy or connect buttons themselves. Operations Managers never need to be able to use the show, copy or connect buttons themselves. Which safe permission do you need to grant Operations Staff? Check all that apply. Which safe permission do you need to grant Operations Staff? Check all that apply. A. Use Accounts A. Use Accounts B. Retrieve Accounts B. Retrieve Accounts C. Authorize Password Requests C. Authorize Password Requests D. Access Safe without Authorization D. Access Safe without Authorization Answer: A,B,C Answer: A,B,C

5. Question 4 Question 4 A user with administrative privileges to the vault can only grant other users privileges that he himself A user with administrative privileges to the vault can only grant other users privileges that he himself has. has. A. TRUE A. TRUE B. FALSE B. FALSE Answer: B Answer: B

6. Question 5 Question 5 When a group is granted the 'Authorize Account Requests' permission on a safe Dual Control When a group is granted the 'Authorize Account Requests' permission on a safe Dual Control requests must be approved by requests must be approved by A. Any one person from that group A. Any one person from that group B. Every person from that group B. Every person from that group C. The number of persons specified by the Master Policy C. The number of persons specified by the Master Policy D. That access cannot be granted to groups D. That access cannot be granted to groups Answer: C Answer: C

7. Question 6 Question 6 Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed. be changed. A. HeadStartInterval A. HeadStartInterval B. Interval B. Interval C. ImmediateInterval C. ImmediateInterval D. The CPM does not change the password under this circumstance D. The CPM does not change the password under this circumstance Answer: C Answer: C

8. Question 7 Question 7 Which one the following reports is NOT generated by using the PVWA? Which one the following reports is NOT generated by using the PVWA? A. Accounts Inventory A. Accounts Inventory B. Application Inventory B. Application Inventory C. Sales List C. Sales List D. Convince Status D. Convince Status Answer: C Answer: C

9. Question 8 Question 8 In the Private Ark client, how do you add an LDAP group to a CyberArk group? In the Private Ark client, how do you add an LDAP group to a CyberArk group? A. Select Update on the CyberArk group, and then click Add > LDAP Group A. Select Update on the CyberArk group, and then click Add > LDAP Group B. Select Update on the LDAP Group, and then click Add > LDAP Group B. Select Update on the LDAP Group, and then click Add > LDAP Group C. Select Member Of on the CyberArk group, and then click Add > LDAP Group C. Select Member Of on the CyberArk group, and then click Add > LDAP Group D. Select Member Of on the LDAP group, and then click Add > LDAP Group D. Select Member Of on the LDAP group, and then click Add > LDAP Group Answer: D Answer: D

10. Question 9 Question 9 What is the purpose of a linked account? What is the purpose of a linked account? A. To ensure that a particular collection of accounts all have the same password. A. To ensure that a particular collection of accounts all have the same password. B. To ensure a particular set of accounts all change at the same time. B. To ensure a particular set of accounts all change at the same time. C. To connect the CPNI to a target system. C. To connect the CPNI to a target system. D. To allow more than one account to work together as part of a password management process. D. To allow more than one account to work together as part of a password management process. Answer: D Answer: D

11. Question 10 Question 10 You receive this error: “Error in changepass to user domain\user on domain server(\domain. You receive this error: “Error in changepass to user domain\user on domain server(\domain. (winRc=5) Access is denied.” (winRc=5) Access is denied.” Which root cause should you investigate? Which root cause should you investigate? A. The account does not have sufficient permissions to change its own password. A. The account does not have sufficient permissions to change its own password. B. The domain controller is unreachable. B. The domain controller is unreachable. C. The password has been changed recently and minimum password age is preventing the change. C. The password has been changed recently and minimum password age is preventing the change. D. The CPM service is disabled and will need to be restarted. D. The CPM service is disabled and will need to be restarted. Answer: A Answer: A