CAU201認定ガイドPDFは100%カバー率でリアル試験問題が使える
合格させるCAU201試験にはリアル問題解答
質問 # 102
It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.
- A. FALSE
- B. TRUE
正解：B
質問 # 103
A Logon Account can be specified in the Master Policy.
- A. FALSE
- B. TRUE
正解：B
質問 # 104
Which one the following reports is NOT generated by using the PVWA?
- A. Application Inventory
- B. Accounts Inventory
- C. Convince Status
- D. Sales List
正解：D
質問 # 105
The Privileged Access Management solution provides an out-of-the-box target platform to manage SSH keys, called UNIX Via SSH Keys.
How are these keys managed?
- A. CyberArk stores Public keys in the Vault and updates Private keys on target systems.
- B. CyberArk stores both Private and Public keys and can update target systems with either key.
- C. CyberArk does not store Public or Private keys and instead uses a reconcile account to create keys on demand.
- D. CyberArk stores Private keys in the Vault and updates Public keys on target systems.
正解：D
質問 # 106
When on-boarding account using Accounts Feed, which of the following is true?
- A. You can specify the name of a new Platform that will be created and associated with the account.
- B. You must specify an existing Safe where the account will be stored when it is on-boarded to the Vault.
- C. Any account that is on-boarded can be automatically reconciled regardless of the platform it is associated
with. - D. You can specify the name of a new safe that will be created where the account will be stored when it is on-
boarded to the Vault.
正解：A
解説：
Explanation/Reference: https://www.cyberark.com/resource/automating-privileged-account-onboarding/
質問 # 107
An auditor needs to login to the PSM in order to live monitor an active session. Which user ID is used to establish the RDP connection to the PSM server?
- A. PSMAdminConnect
- B. PSMGwUser
- C. PSMMaster
- D. PSMConnect
正解：A
質問 # 108
You need to enable the PSM for all platforms.
Where do you perform this task?
- A. Administration > Options > Connection Components
- B. Master Policy > Session Management
- C. Platform Management > (Platform) > UI & Workflows
- D. Master Policy > Privileged Access Workflows
正解：C
質問 # 109
Target account platforms can be restricted to accounts that are stored in specific Safes using the AllowedSafes property.
- A. TRUE
- B. FALSE
正解：B
質問 # 110
For an account attached to a platform that requires Dual Control based on a Master Policy exception, how
would you configure a group of users to access a password without approval.
- A. Edit the master policy rule and modify the advanced 'Access safe without approval' rule to include the
group. - B. On the safe in which the account is stored grant the group the 'Access safe without audit' authorization.
- C. Create an exception to the Master Policy to exclude the group from the workflow process.
- D. On the safe in which the account is stored grant the group the 'Access safe without confirmation'
authorization.
正解：C
解説：
Explanation/Reference: https://www.reddit.com/r/CyberARk/comments/6270zr/dual_control_on_specific_accounts/
質問 # 111
CyberArk implements license limits by controlling the number and types of users that can be provisioned in the
vault.
- A. FALSE
- B. TRUE
正解：B
解説：
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing-the-
CyberArk-License.htm
質問 # 112
When running a "Privileged Accounts Inventory" Report through the Reports page in PVWA on a specific safe, which permission/s are required on that safe to show complete account inventory information?
- A. List Accounts, Access Safe without confirmation
- B. Manage Safe, View Audit
- C. List Accounts, View Safe Members
- D. Manage Safe Owners
正解：C
質問 # 113
It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur
- A. FALS
- B. TRUE
正解：B
解説：
Explanation
Password reconciliation can be restricted to specific days. This means that the CPM will only reconcile passwords on the days of the week specified in the RCExecutionDays parameter. The days of the week are represented by the first 3 letters of the name of the day. Sunday is represented by Sun, Mondayby Mon, etc.
質問 # 114
Match the log file name with the CyberArk Component that generates the log.
正解：
解説：
質問 # 115
You are creating a new Rest API user that utilizes CyberArk Authentication.
What is a correct process to provision this user?
- A. PVWA > User Provisioning > Users and Groups > New > User
- B. PVWA > User Provisioning > LDAP Integration > Add Mapping
- C. Private Ark Client > Tools > Administrative Tools > Directory Mapping > Add
- D. Private Ark Client > Tools > Administrative Tools > Users and Groups > New > User
正解：C
質問 # 116
Which of the Following can be configured in the Master Poky? Choose all that apply.
- A. Ticketing Integration
- B. Custom Connection Components
- C. Password Reconciliation
- D. Password Aging Rules
- E. Required Properties
- F. Dual Control
- G. Exclusive Passwords
- H. One Time Passwords
正解：D、F、G、H
質問 # 117
You have associated a logon account to one of your UNIX root accounts in the vault. When attempting to
change the root account's password the CPM will...
- A. Log in to the system as the logon account, run the su command to log in as root, and then change root's
password. - B. None of these.
- C. Log in to the system as root, then change root's password.
- D. Log in to the system as the logon account, then change root's password
正解：C
質問 # 118
Which of the following PTA detections are included in the Core PAS offering?
- A. Unmanaged Privileged Access
- B. Golden Ticket
- C. Suspected Credential Theft
- D. Over-Pass-The Hash
正解：A
解説：
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PTA/What-Does-PTA-
Detect.htm
質問 # 119
When on-boarding account using Accounts Feed, Which of the following is true?
- A. You can specify the name of a new Platform that will be created and associated with the account
- B. Any account that is on boarded can beautomaticallyreconciled regardless ofthe platformit isassociated with.
- C. You must specify an existing Safe where are account will be stored whenitis on boarded to the Vault
- D. You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.
正解：B
質問 # 120
Which one the following reports is NOT generated by using the PVWA?
- A. Application Inventory
- B. Convince Status
- C. Accounts Inventory
- D. Sales List
正解：B
質問 # 121
What is the purpose of the password change process?
- A. To change the password of an account according to organizationally defined password rules
- B. To generate a new complex password
- C. To test that CyberArk is storing accurate credentials for accounts
- D. To allow CyberArk to manage unknown or lost credentials
正解：A
質問 # 122
The Password upload utility can be used to create safes.
- A. FALS
- B. TRUE
正解：B
質問 # 123
Target account platforms canbe restricted to accounts that are stored m specific Safes using the AllowedSafes property.
- A. FALSE
- B. TRUE
正解：B
質問 # 124
Your organization requires all passwords be rotated every 90 days.
Where can you set this regulatory requirement?
- A. PVWAConfig.xml
- B. Platform Configuration
- C. Master Policy
- D. Safe Templates
正解：C
質問 # 125
......
100%無料CAU201日常練習試験には179問があります：https://jp.fast2test.com/CAU201-premium-file.html