CyberArk Defender CAU201 Practice Test Questions

1. If a user is a member of more than one group that has authorizations on a safe, by default that user is granted____________________.

the vault will not allow this situation to occur.

only those permissions that exist on the group added to the safe first.

only those permissions that exist in all groups to which the user belongs.

the cumulative permissions of all the groups to which that user belongs.

2. It is possible to control the hours of the day during which a user may long into the vault.

TRUE

FALSE

3. VAULT authorizations may be granted to ____________________. Select all that apply.

Vault Users

Vault Groups

LDAP Users

LDAP Groups

4. What is the purpose of the Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how long the CPM rests between password changes.

To control the maximum amount of time the CPM will wait for a password change to complete.

5. All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of OperationsManagers. The members of OperationsManagers never need to be able to use the show, copy or connect buttons themselves.

Which safe permissions do you need to grant to OperationsStaff? Check all that apply.

Use Accounts

Retrieve Accounts

List Accounts

Authorize Password Requests

Access Safe without Authorization

6. What is the purpose of the Immediate Interval setting in a CPM policy?

To control how often the CPM looks for System Initiated CPM work.

To control how often the CPM looks for User Initiated CPM work.

To control how long the CPM rests between password changes.

To control the maximum amount of time the CPM will wait for a password change to complete.

7. Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that apply.

PAR Agent

PrivateArk Server Central Administration

Edit DBParm.ini in a text editor.

Setup.exe

8. A Logon Account can be specified in the Master Policy.

TRUE

FALSE

9. For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

Create an exception to the Master Policy to exclude the group from the workflow process.

Edit the master policy rule and modify the advanced ‘Access safe without approval’ rule to include the group.

On the safe in which the account is stored grant the group the ‘Access safe without audit’ authorization.

On the safe in which the account is stored grant the group the ‘Access safe without confirmation’ authorization.

10. As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.

TRUE

FALSE

CyberArk Defender CAU201 Practice Test Questions

Leave a Reply Cancel reply