CAU302 Online Practice Questions and Answers

What is the primary purpose of Dual Control?

A. Reduced risk of credential theft

B. More frequent password changes

C. Non-repudiation (individual accountability)

D. To force a `collusion to commit' fraud ensuring no single actor may use a password without authorization

Which of the following logs contain information about errors related to PTA?

A. ITAlog.log

B. diamond.log

C. pm_error.log

D. WebApplication.log

What is the purpose of the Allowed Safes parameter in a CPM policy? Select all that apply.

A. To improve performance by reducing CPU workload.

B. To prevent accidental use of a policy in the wrong safe.

C. To allow users to access only the passwords they should be able to access.

D. To enforce Least Privilege in CyberArk.

An auditor initiates a LIVE monitoring session to PSM server to view an ongoing LIVE session. When the auditor's machine makes an RDP connection the PSM server, which user will be used?

A. PSMAdminConnect

B. Shadowuser

C. PSMConnect

D. Credentials Stored in the Vault for the Target Machine

Which of the following are secure options for storing the contents of the Operator CD. while still allowing the contents to be accessible upon a planned Vault restart? Choose alt that apply

A. Store the CD in a physical safe and mount the CD every time vault maintenance is performed.

B. Copy the contents of the CD to the System Safe on the vault

C. Copy the contents of the CD to a folder on the vault server and secure it with NTFS permissions.

D. Store the server key in a Hardware Security Module.

E. Store the server key in the Provider cache

The DR module allows an integration with Enterprise Backup software.

A. TRUE

B. FALSE

When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.

A. True, this is the default behavior.

B. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the padr.ini file.

C. True, if the AllowFailback setting is set to "yes" in the padr.ini file.

D. False, the Vault administrator must manually set the DR Vault to DR mode by setting "FailoverMode=no" in the dbparm.ini file.

Which parameter controls how often the CPM looks for Exclusive Passwords that need to be changed?

A. HeadStartInterval

B. Interval

C. ImmediateInterval

D. The CPM does not change the password under this circumstance