Quiz For Cyberark's Cau302: Defender + Sentry (Over 230 Questions In Quiz Engine)
-
1/231 Questions
Reports can be scheduled to run on a periodic basis.
-
True
-
False
-
This quiz engine has be developed by CyberArk Engineers who have PASSED CyberArk's CAU302 (v10) certification exam. Real questions from the CyberArk CAU302 certification exam are developed into this quiz engine so you will be well prepared for the official CyberArk CAU302: Defender + Sentry certification exam.
Each quiz attempt includes 80 questions, drawing from 230+ questions in the quiz engine, giving you 180 minutes to complete just like the official certification exam.
With OVER 230 questions in the quiz engine, this is the MOST comprehensive quiz to prepare you for CyberArk's CAU302 Defender + Sentry certification exam. You can take this quiz an UNLIMITED number of times, in order to help better prepare you for the official CyberArk CAU302: Defender + Sentry certification exam hosted by Pearson VUE.
After each attempt of this quiz you will be able to review your results, and many of the questions provide explanations for the correct answer making you feel as though you are being taught by a certified CyberArk instructor.
If you prefer to first attempt the FREE sample quiz, please click here.
Quiz Preview
- 2.
The vault provides a tamper-proof audit trail.
-
True
-
False
Correct Answer
A. True -
- 3.
Which Built-In group grants access to the ADMINISTRATION page?
-
PVWAMonitor
-
PVWAUsers
-
Auditors
-
Vault Admins
Correct Answer
A. Vault Admins -
- 4.
Using the SSH Key Manager it is possible to allow CPM to manage SSH Keys similarly to passwords.
-
True
-
False
Correct Answer
A. True -
- 5.
PSM captures a record of each command that was executed in Unix.
-
True
-
False
Correct Answer
A. True -
- 6.
PSM captures a record of each command that was issued in SQL Plus.
-
True
-
False
Correct Answer
A. True -
- 7.
Auto-Detection can be configured to leverage LDAP/S.
-
True
-
False
Correct Answer
A. True -
- 8.
Users can be restricted to using certain CyberArk interfaces (e.g. PVWA or PACLI)
-
True
-
False
Correct Answer
A. True -
- 9.
The primary purpose of exclusive accounts is to ensure non-repudiation (individual accountability).
-
True
-
False
Correct Answer
A. True -
- 10.
One time passwords reduce the risk of Pass the Hash vulnerabilities in Windows.
-
True
-
False
Correct Answer
A. True -
- 11.
In order to retrieve data from the vault a user MUST use an interface provided by CyberArk.
-
True
-
False
Correct Answer
A. True -
- 12.
The Remote Desktop Services role must be properly licensed by Microsoft.
-
True
-
False
Correct Answer
A. True -
- 13.
The vault supports a number of dual factor authentication methods.
-
True
-
False
Correct Answer
A. True -
- 14.
A vault admin received an email notification that a password verification process has failed, which service sent the message?
-
The PrivateArk Server Service on the Vault.
-
The CyberArk Password Manager service on the Components Server.
-
The CyberArk Event Notification Engine Service on the Vault.
-
The CyberArk Privileged Session Manager service on the Vault.
Correct Answer
A. The CyberArk Event Notification Engine Service on the Vault. -
- 15.
The primary purpose of the PSM server is Password Management.
-
True
-
False
Correct Answer
A. False -
- 16.
In the vault each password is encrypted with a unique encryption key.
-
True
-
False
Correct Answer
A. True -
- 17.
The best practice for storing the Master CD is to store the CD in a secure location, such as a physical safe.
-
True
-
False
Correct Answer
A. True -
- 18.
Which CyberArk component changes passwords on Target Devices?
-
PVWA
-
CPM
-
PSM
-
Vault
Correct Answer
A. CPM -
- 19.
Password Vault Web Access is an ASP .NET application, deployed on IIS Server (WebServer).
-
True
-
False
Correct Answer
A. True -
- 20.
Remote Desktop Session host needs a client access license (CAL).
-
True
-
False
Correct Answer
A. True -
- 21.
CyberArk recommends two-factor authentication, preferably over RADIUS, for increased Vault security.
-
True
-
False
Correct Answer
A. TrueExplanation
EXPLANATION for Answer: Please, review CyberArk’s documentation on this topic: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Security/Security%20Fundamentals-Introduction.htmRate this question:
-
- 22.
You have associated a logon account to one of your UNIX root accounts in the vault. When attempting to verify the root account’s password the CPM will…
-
Ignore the logon account and attempt to log in as root.
-
Prompt the end user with a dialog box asking for the login account to use.
-
Log in first with the logon account, then run the su command to log in as root using the password in the vault.
-
None of these.
Correct Answer
A. Log in first with the logon account, then run the su command to log in as root using the password in the vault. -
- 23.
The System safe allows access to the Vault configuration files.
-
True
-
False
Correct Answer
A. True -
- 24.
The Password upload utility can be used to create safes.
-
True
-
False
Correct Answer
A. True -
- 25.
When managing SSH keys, CPM automatically pushes the Public Key to the target system.
-
True
-
False
Correct Answer
A. TrueExplanation
EXPLANATION for Answer: CPM automatically pushes the Public Key to the target system. CPM automatically pushes the Private Key to the vault. Please, read from CyberArk's website: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/SSHKM/Introduction.htm. Also, see video created by SSH Communications Security, https://youtu.be/ke_M3t_L3iY?t=49.Rate this question:
-
- 26.
The Application Inventory report is related to AIM.
-
True
-
False
Correct Answer
A. True -
- 27.
Multiple PSM Servers can be load balanced.
-
True
-
False
Correct Answer
A. True -
- 28.
What is the purpose of the PrivateArk Database service?
-
Maintains Vault metadata.
-
Communicates with components.
-
Sends email alerts from the vault ID.
-
Executes password changes
Correct Answer
A. Maintains Vault metadata. -
- 29.
The primary purpose of the CPM is Password Management.
-
True
-
False
Correct Answer
A. True -
- 30.
You can change the vault license by uploading the new license to the system safe.
-
True
-
False
Correct Answer
A. True -
- 31.
The CreateCredFile.exe utility is used to create or update a credential file.
-
True
-
False
Correct Answer
A. True -
- 32.
CyberArk supports role based access control?
-
True
-
False
Correct Answer
A. True -
- 33.
The Privileged Session Manager SSH Proxy (PSMP) should be installed on the Vault server.
-
True
-
False
Correct Answer
A. FalseExplanation
EXPLANATION for Answer: The PSMP must be installed on a dedicated machine, thus, not shared with other CyberArk products, that has access to the Vault and to the target systems.Rate this question:
-
- 34.
DNS must be enabled on the Digital Vault Server.
-
True
-
False
Correct Answer
A. FalseExplanation
EXPLANATION for Answer: To maintain the security and integrity of the Digital Vault, CyberArk requires complete isolation to prevent Command and Control (C2) channels. Thus, DNS must NOT be enabled on the Digital Vault Server. DNS is known to be used by threat actors as a covert channel to bypass network segmentation and utilize internal resources as an outside interface.Rate this question:
-
- 35.
The Digital Vault Server must be built from the original Microsoft installation media, and no third-party software, such as anti-virus or remote management solutions, must be installed.
-
True
-
False
Correct Answer
A. TrueExplanation
EXPLANATION for Answer: To avoid the potential for untrusted operating system components or the inadvertent introduction of third-party software, it is important that the Digital Vault Server be built from trusted original media. Any third-party software installed on the Digital Vault Server introduces risks not present in a standard, secure configuration. Such risks include: The opening of firewall ports, which introduce additional external attack vectors. Security vulnerabilities, potentially present in any third-party software, can create pivot points and introduce new attack vectors. Operational risks, including an impact to server availability, stemming from conflict between internal components of the Digital Vault and third-party software. Such conflicts often delay troubleshooting, which impacts CyberArk’s support SLAs and increase the time to resolution.Rate this question:
-
- 36.
If a password is changed manually on a server, bypassing the CPM, how would you configure the account so that the CPM could resume management automatically?
-
Configure the Provider to change the password to match the Vault’s Password.
-
Associate a reconcile account and configure the platform to reconcile automatically.
-
Associate a logon account and configure the platform to reconcile automatically.
-
Run the correct auto detection process to rediscover the password.
Correct Answer
A. Associate a reconcile account and configure the platform to reconcile automatically. -
- 37.
A Reconcile Account can be specified in the platform settings.
-
True
-
False
Correct Answer
A. True -
- 38.
In order to retrieve data from the vault a user MUST use an interface provided by CyberArk.
-
True
-
False
Correct Answer
A. True -
- 39.
In order to avoid conflicts with the hardening process, third-party applications like Antivirus and Backup Agents should be installed on the Vault server before installing the Vault.
-
True
-
False
Correct Answer
A. False -
- 40.
Multiple PVWA servers are always all active.
-
True
-
False
Correct Answer
A. True -
- 41.
Tsparm.ini is the main configuration file for the vault.
-
True
-
False
Correct Answer
A. False -
- 42.
After a PSM session is complete, the PSM server uploads the recording to the Vault for long-term storage.
-
True
-
False
Correct Answer
A. True -
- 43.
The PrivateArk client allows a user to view the contents of the vault like a filesystem.
-
True
-
False
Correct Answer
A. True -
- 44.
The RemoteApp feature of PSM allows seamless Application windows (i.e. the Desktop of the PSM server will not be visible).
-
True
-
False
Correct Answer
A. True -
- 45.
Which of the following protocols need to be installed on a standalone vault server?
-
SSH with CORE
-
Internet Protocol Version 6 (TCP/IPv6)
-
Putty
-
Internet Protocol Version 4 (TCP/IPv4)
Correct Answer
A. Internet Protocol Version 4 (TCP/IPv4) -
- 46.
The AllowedSafes parameter allows a regular expression that lists the safes that the target platform policy can be applied to.
-
True
-
False
Correct Answer
A. True -
- 47.
Application inventory is related to AIM.
-
True
-
False
Correct Answer
A. True -
- 48.
The Password Upload utility can be used to create safes.
-
True
-
False
Correct Answer
A. True -
- 49.
To connect to a Windows server through PVWA, RDP is utilized.
-
True
-
False
Correct Answer
A. True -
Quiz Review Timeline (Updated): Mar 19, 2022 +
Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.
-
Current Version
-
Mar 19, 2022Quiz Edited by
ProProfs Editorial Team -
Aug 19, 2019Quiz Created by
Nathan Roberts
Related Topics
Back to top