Ace CyberArk CAU301 Certification with Actual Questions Aug 14, 2022 Updated
2022 The Most Effective CAU301 with 40 Questions Answers
How to study the CAU301 Exam
ActualTestsIT expert team recommends you to prepare some notes on these topics along with it don't forget to practice CAU-301 exam dumps which been written by our expert team, both these will help you a lot to clear this exam with good marks.
CAU301 Exam topics
Candidates must know the exam topics before they start of preparation. Because it will really help them in hitting the core. Our CAU-301 practice exams and CAU-301 practice test will include the following topics:
- Proficient to define and describe the CyberArk Privileged Account Security system architecture, requirements, and workflow processes
- Knowledge of Configuring authentication mechanisms including multi-factor authentication using CyberArk, RADIUS, LDAP/S, PKI, Windows
- Understand how to integrate with external services, e.g., LDAP/S, NTP, SMTP, SYSLOG
- Knowledge of securing and installing Password Vault Web Access (PVWA) Central Policy Manager (CPM) and Privileged Session Manager (PSM) in a distributed or Load Balanced configuration
- Understand how to install and configure the CyberArk Privileged Account Security solution securely following Best Practices
CyberArk CAU301 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION 10
The Remote Desktop Services role must be properly licensed by Microsoft.
- A. TRUE
- B. FALSE
Answer: A
Explanation:
Explanation
NEW QUESTION 11
Which of the following are supported authentication methods for CyberArk? Check all that apply
- A. SAML
- B. CyberArk Password (SRP)
- C. LDAP
- D. RADIUS
- E. OracleSSO
- F. Biometric
- G. PKI
Answer: B,C,D
NEW QUESTION 12
Which of the following protocols need to be installed on a standalone vault server?
- A. Check all that apply
- B. Client for Microsoft Networks
- C. Internet Protocol Version 4 (TCP/IPv4)
- D. NIC Teaming Driver, if applicable
- E. File and Printer Sharing for Microsoft Networks
- F. QoS Packet Scheduler
Answer: E
NEW QUESTION 13
By default, the vault secure protocol uses which IP port and protocol.
- A. TCP/443
- B. TCP/80
- C. UDP/1858
- D. TCP/1858
Answer: D
Explanation:
Explanation/Reference: http://docplayer.net/53689072-The-cyberark-digital-vault-built-for-security.html
NEW QUESTION 14
When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.
- A. True, this is the default behavior
- B. True, if the 'AllowFailback' setting is set to yes in the PADR.ini file.
- C. False, this is not possible
- D. True if the 'AllowFailback' setting is set to yes in the dbparm mi file
Answer: A
NEW QUESTION 15
What would be a good use case for the Disaster Recovery module?
- A. Recovery Time Objectives or Recovery Point Objectives are at or near zero.
- B. PSM is used.
- C. Off site replication is required.
- D. Integration with an Enterprise Backup Solution is required.
Answer: C
NEW QUESTION 16
Which CyberArk component changes passwords on Target Devices?
- A. PVWA
- B. PrivateArk
- C. CPM
- D. OPM
- E. PSM
- F. AIM
- G. Vault
Answer: C
NEW QUESTION 17
The vault server uses a modified version of the Microsoft Windows firewall.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION 18
What is the PRIMARY reason for installing more than 1 active CPM?
- A. Multiple instances create fault tolerance.
- B. Multiple instances increase response time.
- C. Having additional CPMs increases the maximum number of devices CyberArk can manage
- D. Installing CPMs in multiple sites prevents complex firewall rules to manage devices at remote sites.
Answer: C
NEW QUESTION 19
The security of the Vault Server is entirely dependent on the security of the network.
- A. FALSE
- B. TRUE
Answer: A
NEW QUESTION 20
When a DR vault server becomes an active vault, it will automatically fail back to the original state once the primary vault comes back online.
- A. False, this is not possible.
- B. True, this is the default behavior.
- C. True, if the 'AllowFailback' setting is set to yes in the dbparm.ini file.
- D. True, if the 'AllowFailback' setting is set to yes in the PADR.ini file.
Answer: D
NEW QUESTION 21
Which of the following are prerequisites for installing PVWA Check all that Apply.
- A. NET 4.5.1 Framework Feature
- B. Web Services Role
- C. Windows BitLocker
- D. Remote Desktop Services Role
Answer: A
NEW QUESTION 22
Which keys are required to be present in order to start the PrivateArk Server Service? Select all that apply.
- A. Recovery Public Key
- B. Recovery Private Key
- C. Safe Key
- D. Server Key
Answer: B
NEW QUESTION 23
Which keys are required to be present in order to start the PrivateArk Server Service?
- A. Recovery Public Key
- B. Safe Key
- C. Server Key
- D. Recovery Private Key
Answer: C
Explanation:
Explanation/Reference: https://www.reddit.com/r/CyberARk/comments/8s96n8/certificat_problem_with_my_vault/
NEW QUESTION 24
You are successfully managing passwords in the alpha.cyberark.com domain; however, when you attempt to manage a password in the beta.cyberark.com domain, you receive the 'network path not found' error. What should you check first?
- A. That the username and password are correct.
- B. That an appropriate trust relationship exists between alpha.cyberark.com and beta.ceberark.com
- C. That the CPM can successfully resolve addresses in the beta.cyberark.com domain.
- D. That the end user has the correct permissions on the safe.
Answer: C
NEW QUESTION 25
......
Try Free and Start Using Realistic Verified CAU301 Dumps Instantly.: https://2cram.actualtestsit.com/CyberArk/CAU301-exam-prep-dumps.html