CyberArk Defender - CAU201 Exam Practice Test

A. Security Operators

B. Security Admins

C. Vault Admins

D. Auditors

A. More frequent password changes

B. Reduced risk of credential theft

C. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization

D. Non-repudiation (individual accountability)

A. It determines how far in advance audit data is collected tor reports

B. It instructs the CPM to initiate the password change process X number of days before expiration.

C. It instructs the AIM Provider to 'skip the cache' during the defined time period

D. It alerts users of upcoming password changes x number of days before expiration.

A. Policies > Master Policy > Allow EPV transparent connections > Active

B. Policies > Master Policy > Session Management > Require privileged session monitoring and isolation > Add Exception

C. Policies > Master Policy > Password Management

D. Policies > Master Policy > Allow EPV transparent connections > Inactive

A. It must be NetBIOS name

B. It must be an IP address

C. It must be a Fully Qualified Domain Name (FQDN)

D. Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable

A. ImmediateInterval

B. Interval

C. HeadStartInterval

D. The CPM does not change the password under this circumstance

A. Suspected credential theft

B. Unmanaged privileged access

C. Over-Pass-The-Hash

D. Golden Ticket

A. On the safe in which the account is stored grant the group the' Access safe without audit' authorization.

B. Edith the master policy rule and modify the advanced' Access safe without approval' rule to include the group.

C. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization.

D. Create an exception to the Master Policy to exclude the group from the workflow process.

A. Retrieve accounts, Access Safe without confirmation

B. Retrieve accounts, Authorize account request

C. List accounts, Authorize account request

D. List accounts, Unlock accounts

A. Update > Authorizations tab

B. Update > Group tab

C. Update > General tab

D. Update > Member Of tab

A. You can specify the name of a new sale that will be created where the account will be stored when it is on-boarded to the Vault.

B. You can specify the name of a new Platform that will be created and associated with the account

C. Any account that is on boarded can be automatically reconciled regardless of the platform it is associated with.

D. You must specify an existing Safe where are account will be stored when it is on boarded to the Vault