Crack4sure Logo
We at Crack4sure are committed to giving students who are preparing for the CyberArk CAU302 Exam the most current and reliable questions . To help people study, we've made some of our CyberArk Defender + Sentry exam materials available for free to everyone. You can take the Free CAU302 Practice Test as many times as you want. The answers to the practice questions are given, and each answer is explained.
What is the maximum number of levels of authorizations you can set up in Dual Control?
When managing SSH keys, the CPM stores the Public Key ________________.
Which file is used to configure new firewall rules on the Vault?
In order to grant a permission to a user, and administrator MUST possess that permission.
Which is the correct order of installation for PAS components?
Two-factor authentication can be implemented by integrating the Vault with a RADIUS server configured to require PIN and token.
Which Master Policy Setting(s) must be active in order to have an account checked-out by one user for a predetermined amount of time?
In Accounts Discovery, you can configure a Windows discovery to scan______________.
Which utility can be used to copy a server key to an HSM?
Which file is used to open up a non-standard Firewall port to the Vault?
Which user(s) can access all passwords in the vault
Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.D18912E1457D5D1DDCBD40AB3BF70D5D
What is the purpose of the Allowed Safes parameter in a CPM policy? Select all that apply.
Accounts Discovery allows secure connections to domain controllers.
A safe was recently created by a user who is a member of the LDAP Vault Administrators group. Which of the
following users does not have access to the newly created safe by default?
Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?
The vault supports a number of dual factor authentication methods.
Using the SSH Key Manager it is possible to allow CPM to manage SSH Keys similarly to passwords.
Which of the following PTA detections are included in the Core PAS offering? (Choose all that apply.)
Which of the following sends out Simple Network Management Protocol (SNMP) traps?
It is possible to restrict the time of day. or day of week that a change process can occur
Select the best practice for storing the Master CD.
Which parameter controls how often the CPM looks for accounts that need to be changed from recently completed Dual control requests?
Which of the following statements are NOT true when enabling PSM recording for a target Windows server? Choose all that apply
Multiple Vault Servers can be load balanced.
A Vault Administrator wants to change the PSM Server ID to comply with a naming standard What is the process for changing the PSM Server ID?
CyberArk creates exceptions for Data Execution Prevention (DEP) on selected executable files. This is done as part of installing which of the following components?
What is the purpose of the password verify process?
What is the primary purpose of Exclusive Accounts?
Which of the following options is not set in the Master Policy?
What is the purpose of the PrivateArk Server service?
In version 10.7 the correct order of installation for components changed. Make the necessary corrections to the list below to show the new installation order.
Select and Place:
To support a fault tolerant and high-availability architecture, the Password Vault Web Access (PVWA) servers must to be configured to communicate with the Primary Vault and Satellite Vaults. Which file needs to be changed on the PVWA to enable this setup?
Can ITALOG records be forwarded to the monitoring solution via Security Information and Event Management (SIEM) integration?
An Auditor needs to login to the PSM in order to live monitor an active session. Which User ID is used to establish the RDP connection to the PSM server?
After the Vault Server is installed, the Microsoft Windows Firewall is now commandeered by the Vault Can the administrator change these firewall rules?
Which of the following is considered a prerequisite for installing PSM?
An SNMP integration allows you to forward audit records from the vault to the SIEM.
Which is the purpose of the interval setting in a Central Policy Manager (CPM) policy?
What is the proper way to allow the Vault to resolve host names?
What is the proper way to allow the Vault to resolve host names?
What is the purpose of the CyberArk Event Notification Engine service.
Which report could show all accounts that are past their expiration dates?
One of your users is receiving the error message “ITATS006E Station is suspended for User jsmith” when
attempting to sign in to the pvwa. Which utility would you use to correct this problem?
Accounts Discovery allows secure connections to domain controllers.
Which of the following is NOT a use case for installing multiple CPMS?
Which Built-in group grants access to the ADMINISTRATION page?
The Vault server requires WINS services to work properly.
If a password is changed manually on a server, bypassing the CPM, how would you configure the account so
that the CPM could resume management automatically?
When a DR Vault Server becomes an active vault, it will automatically revert back to DR mode once the Primary Vault comes back online.
Which is the purpose of the HeadStartInterval setting in a platform?
PSM captures a record of each command that was issues in SQL Plus.
What is the purpose of the PrivateArk Database service?
What is the purpose of the password Change process?
Which service is optional on the Vault?
Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the domain controller during LDAP/S integration?
Which file would you modify to configure your Vault Server to forward Activity Logs to a SIEM or SYSLOG server?
In order to retrieve data from the vault a user MUST use an interface provided by CyberArk.
Which of the following is considered a prerequiste for installing PSM?
Is it possible to modify the CyberArk Vault Audit Log?
A logon account can be specified in the platform settings.
The PSM Gateway (also known as the HTML5 Gateway) can be installed
What conditions must be met in order to log into the vault as the Master user? Select all that apply
The Vault does not support dual factor authentication.
Multiple PVWA servers provide automatic load balancing.
When working with the CyberArk High Availability Cluster, which services are running on the passive node?
3 Months Free Update
3 Months Free Update
3 Months Free Update
TESTED 05 Dec 2025
