CyberArk cau201 practice test

Question 1

If the AccountUploader Utility is used to create accounts with SSH keys, which parameter do you use
to set the full or relative path of the SSH private key file that will be attached to the account?

• A. KeyPath
• B. KeyFile
• C. ObjectName
• D. Address

Question 2

In PVWA, you are attempting to play a recording made of a session by user jsmith, but there is no
option to Fast Forward within the video. It plays and only allows you to skip between commands
instead. You are also unable to download the video.
What could be the cause?

• A. Recording is of a PSM for SSH session.
• B. The browser you are using is out of date and needs an update to be supported.
• C. You do not have the “View Audit” permission on the safe where the account is stored.
• D. You need to update the recorder settings in the platform to enable screen capture every 10000ms or less.

Question 3

When onboarding multiple accounts from the Pending Accounts list, which associated setting must
be the same across the selected accounts?

• A. Platform
• B. Connection Component
• C. CPM
• D. Vault

Question 4

Your organization has a requirement to allow users to check out passwords and connect to targets
with the same account through the PSM.
What needs to be configured in the Master policy to ensure this will happen?

• A. Enforce check-in/check-out exclusive access = active; Require privileged session monitoring and isolation = active
• B. Enforce check-in/check-out exclusive access = inactive; Require privileged session monitoring and isolation = inactive
• C. Enforce check-in/check-out exclusive access = inactive; Record and save session activity = active
• D. Enforce check-in/check-out exclusive access = active; Record and save session activity = inactive

Question 5

To manage automated onboarding rules, a CyberArk user must be a member of which group?

• A. Vault Admins
• B. CPM User
• C. Auditors
• D. Administrators

Question 6

Which permissions are needed for the Active Directory user required by the Windows Discovery
process?

• A. Domain Admin
• B. LDAP Admin
• C. Read/Write
• D. Read

Question 7

Which command configures email alerts within PTA if settings need to be changed post install?

• A. /opt/tomcat/utility/emailConfiguration.sh
• B. /opt/PTA/emailConfiguration.sh
• C. /opt/PTA/utility/emailConfig.sh
• D. /opt/tomcat/utility/emailSetup.sh

Question 8

You are creating a new Rest API user that utilizes CyberArk Authentication.
What is a correct process to provision this user?

• A. Private Ark Client > Tools > Administrative Tools > Users and Groups > New > User
• B. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Add
• C. PVWA > User Provisioning > LDAP Integration > Add Mapping
• D. PVWA > User Provisioning > Users and Groups > New > User

Question 9

You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is
unable to log in directly with the root account and will need to use a secondary account.
How should this be configured to allow for password management using least privilege?

• A. Configure each CPM to use the correct logon account.
• B. Configure each CPM to use the correct reconcile account.
• C. Configure the UNIX platform to use the correct logon account.
• D. Configure the UNIX platform to use the correct reconcile account.

Question 10

DRAG DROP
Match each permission to where it can be found.

Question 11

In a default CyberArk installation, which group must a user be a member of to view the reports
page in PVWA?

• A. PVWAMonitor
• B. ReportUsers
• C. PVWAReports
• D. Operators

Question 12

To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group
will need?

• A. List Accounts, Use Accounts
• B. List Accounts, Use Accounts, Retrieve Accounts
• C. Use Accounts
• D. List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation

Question 13

Which built-in report from the reports page in PVWA displays the number of days until a password is
due to expire?

• A. Privileged Accounts Inventory
• B. Privileged Accounts Compliance Status
• C. Activity Log
• D. Privileged Accounts CPM Status

Question 14

A new HTML5 Gateway has been deployed in your organization.
Where do you configure the PSM to use the HTML5 Gateway?

• A. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway
• B. Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers
• C. Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway
• D. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details

Question 15

Which parameters can be used to harden the Credential Files (CredFiles) while using CreateCredFile
Utility? (Choose three.)

• A. Operating System Username
• B. Host IP Address
• C. Client Hostname
• D. Operating System Type (Linux/Windows/HP-UX)
• E. Vault IP Address
• F. Time Frame