Updated CyberArk Defender Exam CAU201 Dumps Questions

1. Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed.

2. Which of the following logs contains information about errors related to PTA?

3. An auditor needs to login to the PSM in order to live monitor an active session .

Which user ID is used to establish the RDP connection to the PSM server?

4. For a safe with Object Level Access enabled you can turn off Object Level Access Control when it no longer needed on the safe.

5. Customers who have the ‘Access Safe without confirmation’ safe permission on a safe where accounts are configured for Dual control, still need to request approval to use the account.

6. Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

7. Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests.

8. If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?

9. A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

10. Which one the following reports is NOT generated by using the PVWA?

11. It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.

12. Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose three.)

13. Which onboarding method would you use to integrate CyberArk with your accounts provisioning process?

14. As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.

15. CyberArk recommends implementing object level access control on all Safes.

16. Which of these accounts onboarding methods is considered proactive?

17. It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

18. Assuming a safe has been configured to be accessible during certain hours of the day, a Vault Admin may still access that safe outside of those hours.

19. When on-boarding account using Accounts Feed, Which of the following is true?

20. When managing SSH keys, the CPM stores the Public Key

21. Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.

22. If a user is a member of more than one group that has authorizations on a safe, by default that user is granted________.

23. When creating an onboarding rule, it will be executed upon .

24. Which utilities could you use to change debugging levels on the vault without having to restart the vault. Select all that apply.

25. Which user(s) can access all passwords in the Vault?

26. When Dual Control is enabled a user must first submit a request in the Password Vault Web Access (PVWA) and receive approval before being able to launch a secure connection via PSM for Windows (previously known as RDP Proxy).

27. What is the purpose of the PrivateArk Server service?

28. What is the purpose of the PrivateArk Database service?

29. Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.

30. PTA can automatically suspend sessions if suspicious activities are detected in a privileged session, but only if the session is made via the CyberArk PSM.

31. In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault?

32. Secure Connect provides the following. Choose all that apply.

33. The password upload utility must run from the CPM server

34. Which combination of Safe member permissions will allow end users to log in to a remote machine transparently but NOT show or copy the password?

35. Select the best practice for storing the Master CD.

36. What is the purpose of the Immediate Interval setting in a CPM policy?

37. Within the Vault each password is encrypted by:

38. Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

39. Which Master Policy Setting must be active in order to have an account checked-out by one user for a pre-determined amount of time?

40. It is possible to restrict the time of day, or day of week that a [b]verify[/b] process can occur