[2022年04月03日] 無料Defender - Sentry (Combined) CAU302公式認定ガイドPDFダウンロード [Q43-Q58]

Share

[2022年04月03日] 無料Defender - Sentry (Combined) CAU302公式認定ガイドPDFダウンロード

CyberArk CAU302公式認定ガイドPDF


CyberArk CAU302 認定試験の出題範囲:

トピック出題範囲
トピック 1
  • Prepare a Windows Server for PSM Installation
  • Properly Configure Interval Settings
  • Complete a 1st CPM Installation
トピック 2
  • Calculate how much storage should be available to the PSM(s) for PSM recordings
  • Complete an additional CPM Installation
トピック 3
  • Calculate how much storage should be available to the vault for PSM recordings
  • Describe which authentication methods work with which components
トピック 4
  • Determine how many PVWAs should be in a given environment and their placement in the network
  • Prepare a UNIX Server for HTML5 Gateway Installation
トピック 5
  • Determine how many PSMs should be in a given environment and their placement in the network
  • Properly Configure the Allowed Safes Parameter
トピック 6
  • Explain how a PVWA might be load balanced
  • Complete an additional PSM for SSH Installation
  • Convert a Platform from PMterminal to TPC
トピック 7
  • Prepare a UNIX Server for PSM for SSH Installation
  • Determine how many CPMs should be in a given environment and their placement in the network
トピック 8
  • Prepare a Windows Server for PVWA Installation
  • Prepare a Windows Server for CPM Installation

 

質問 43
Select the best practice for storing the Master CD.

  • A. Store the CD in a secure location, such as a physical safe, and copy the contents of the CD to a folder secured with NTFS permissions on the vault.
  • B. Store the CD in a secure location, such as a physical safe.
  • C. Copy the contents of the CD to a Hardware Security Module (HSM) and discard the CD.
  • D. Copy the files to the Vault Server and discard the CD.

正解: A

 

質問 44
The PSM requires the Remote Desktop Web Access role service.

  • A. False
  • B. True

正解: A

 

質問 45
Where does the Vault administrator configure in Password Vault Web Access (PVWA) the Fully Qualified Domain Name (FQDN) of the domain controller during LDAP/S integration?

  • A. PVWA > Administration > Options > LDAP Integration
  • B. PVWA > Platform Management > LDAP Integration
  • C. PVWA > LDAP Integration
  • D. PVWA > Administration > LDAP Integration

正解: D

解説:
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Landing%20Pages/ LPLDAPIntegration.htm

 

質問 46
A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings. What is the issue?

  • A. The user is not a member of the Auditors group.
  • B. The user must login as PSMAdminConnect.
  • C. The user is not a member of the PVWAMonitor group.
  • D. The PSM service is not running.

正解: A

 

質問 47
In an SIEM integration it is recommended to use the fully-qualified domain name (FQDN) when specifying the SIEM server address(es).

  • A. FALSE
  • B. TRUE

正解: A

 

質問 48
In Accounts Discovery, you can configure a Windows discovery to scan______________.

  • A. as many OUs as you wish
  • B. up to three OUs.
  • C. only one OU.
  • D. a number of OUs determined by the OUstoScan setting under the Accounts Feed section in the Administration tab

正解: C

 

質問 49
When managing SSH keys, the Central Policy Manager (CPM) stores the private key .

  • A. in the Vault and on the target server
  • B. on the target server
  • C. in the Vault
  • D. nowhere because the private key can always be generated from the public key

正解: C

 

質問 50
The Vault needs to send SNMP traps to your SNMP solution, which file is used to configure the IP address of the SNMP server?

  • A. ENEConf.ini
  • B. PARAgent.ini
  • C. snmp.ini
  • D. dbparm.ini

正解: D

 

質問 51
Which report could show all accounts that are past their expiration dates?

  • A. Activity log
  • B. Privileged Account Compliance Status report
  • C. Privileged Account Inventory report
  • D. Applications Inventory report

正解: B

 

質問 52
The Vault Internal safe contains the configuration for an LDAP integration.

  • A. FALSE
  • B. TRUE

正解: A

解説:
Explanation

 

質問 53
According to the default web options settings, which group grants access to the reports page?

  • A. Auditors
  • B. PVWAMonitor
  • C. Vault administrators
  • D. PVWAUsers

正解: B

 

質問 54
Multiple Central Policy Manager (CPM) Servers can be load balanced.

  • A. TRUE
  • B. FALSE

正解: A

 

質問 55
What conditions must be met in order to log into the vault as the Master user? Select all that apply

  • A. User must provide the correct master password
  • B. Logon must be originated from the console of the Vault server or an EmergencyStation defined in DBParm.ini
  • C. Logon requires the Recovery Private Key to be accessible to the vault
  • D. Logon must satisfy a challange response request

正解: A,B

 

質問 56
In order to connect to a target device through PSM, the account credentials used for the connection must
be stored in the vault?

  • A. False. Because if credentials are not stored in the vault, the PSM will log into the target device as
    PSMConnect.
  • B. True.
  • C. False. Because if credentials are not stored in the vault, the PSM will prompt for credentials.
  • D. False. Because the user can also enter credentials manually using Secure Connect.

正解: A

 

質問 57
Which user is automatically added to all Safes and cannot be removed?

  • A. Administrator
  • B. Auditor
  • C. Master
  • D. Operator

正解: D

 

質問 58
......

無料CAU302試験問題集試験点数を伸ばそう:https://www.goshiken.com/CyberArk/CAU302-mondaishu.html