最新的Defender - Sentry (Combined)認證 CAU302考試題庫

問題1

When managing SSH keys, the CPM stores the Public Key ________________.

A. On the target server

B. In the Vault

C. Nowhere because the public key can always be generated from the private key

D. A & B

正確答案: A

問題2

One time passwords reduce the risk of Pass the Hash vulnerabilities in Windows

A. TRUE

B. FALSE

正確答案: B

問題3

What is the purpose of the CyberArk Event Notification Engine service.

A. It sends email messages from the Vault.

B. It sends email messages from the CPM

C. It makes vault data available to components.

D. It processes audit report messages

正確答案: A

問題4

Which type of automatic remediation can be performed by the PTA in case of a suspected credential theft security event?

A. Session termination

B. Password reconciliation

C. Session suspension

D. Password change

正確答案: D

問題5

In Accounts Discovery, you can configure a Windows discovery to scan______________.

A. only one OU.

B. as many OUs as you wish

C. a number of OUs determined by the OUstoScan setting under the Accounts Feed section in the Administration tab

D. up to three OUs.

正確答案: A

問題6

After the Vault Server is installed, the Microsoft Windows Firewall is now commandeered by the Vault Can the administrator change these firewall rules?

A. Yes, the administrator can still modify Firewall rules via the Windows Firewall interface

B. Yes, but the administrator can only modify the firewall rules by editing the FirewallRuIes mi file and the restarting the vault

C. No, the Vault does not permit any changes to the Firewall due to security requirements

D. Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the vault

正確答案: D

問題7

When creating an onboarding rule, it will be executed upon .

A. All accounts in the pending accounts list.

B. Any future accounts discovered by a discovery process.

C. All accounts in the pending accounts list and any future accounts discovered by a discovery process.

正確答案: B

問題8

To support a fault tolerant and high-availability architecture, the Password Vault Web Access (PVWA) servers need to be configured to communicate with the Primary Vault and Satellite Vaults. What file needs to be changed on the PVWA to enable this setup?

A. Satellite.ini

B. pvwa.ini

C. dbparm.ini

D. Vault.ini

正確答案: D

問題9

What is the primary purpose of One Time Passwords?

A. Non-repudiation (individual accountability)

B. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization

C. More frequent password changes

D. Reduced risk of credential theft

正確答案: D

問題10

Within the Vault each password is encrypted by

A. Its own unique key.

B. The Recovery Public Key

C. The Server Key

D. The Recovery Private key

正確答案: A

問題11

CyberArk implements license limits by controlling the number and types of users that can be provisioned in the vault.

A. TRUE

B. FALSE

正確答案: A

問題12

What is the proper way to allow the Vault to resolve host names?

A. The Vault cannot resolve host names due to security standards

B. Define a DNS server

C. Defining the local hosts file

D. Define a WINS server

正確答案: C

問題13

Which of the following options is not set in the Master Policy?

A. Dual Control

B. Password Complexity

C. Require Access Reason

D. Password Expiration Date

正確答案: C

最新的CyberArk Defender + Sentry - CAU302免費考試真題

最新更新

站內鏈接

聯系我們